Brit film board proposed as overlord of online pr0nz age checks

Campaigners say body 'will be pushed to block' large number

By Rebecca Hill

Posted in Security, 15th December 2017 12:04 GMT

The British Board of Film Classification will be responsible for regulating age checks for UK users of online porn websites, if the government gets its way.

The UK's Ministry of Fun* has proposed the BBFC as the regulator for ensuring sites are using age-verification controls.

These checks were made mandatory by the Digital Economy Act, and will require residents wishing to access porn sites to prove they are 18 or over.

The government said the BBFC had "unparalleled expertise" in classifying content and a "proven track record of interpreting and implementing legislation" as the authority responsible for video age ratings.

But campaigners have questioned the choice, saying that it hands over too much control to the BBFC, making it a de facto censor of online porn websites – as it can block sites that don't comply by telling UK ISPs to restrict access to them.

"While BBFC say they will only block a few large sites that don't use age verification, there are tens of thousands of porn sites," said Jim Killock, director of the Open Rights Group.

"Once MPs work out that age verification is failing to make porn inaccessible, some will demand that more and more sites are blocked. BBFC will be pushed to block ever larger numbers of websites."

Killock was also sceptical of the BBFC's ability to ensure age verification is safe, secure and anonymous, saying it is "powerless to ensure people's privacy" and the development of age-verification products is "out of BBFC's hands".

There are particular concerns over how data collected from viewers will be used. Information Commissioner Elizabeth Denham previously warned that information like passport details could be "vulnerable to misuse and/or attractive to disreputable third parties".

The new law, experts say, could also encourage users to be less security conscious, leaving them susceptible to dodgy actors setting up fake sites. As security researcher Alec Muffet said on the issue:

Fake porn sites (especially outside the UK) abound; with this mechanism you are training people to give their phone numbers to untrusted websites (whilst still "rewarding" them with porn) and the websites can sell/give these numbers onward to marketing companies.

In addition, there are concerns about the impact the law will have on the porn industry, which is already dominated by MindGeek, the owner of mainstream porn sites like PornHub and RedTube, and video producers such as Brazzers.

That means its product, AgeID – effectively an aggregator of verification solutions with a federated login – is likely to dominate the market.

Critics, such as independent pornographer Pandora/Blake, argue this will allow MindGeek to expand its monopoly, if it licenses AgeID to other porn sites.

On their blog, Pandora/Blake said the end result was "regulatory capture", as "smaller sites like mine will effectively have to pay a 'MindGeek tax' to our biggest competitor".

Security concerns are not helped by MindGeek companies' poor security history. PornHub users suffered a malvertising campaign this year and in 2012 a YouPorn data breach spilled 1 million users' details. ®

*The Department for Digital, Culture, Media & Sport – aka the fun stuff...

Sign up to our NewsletterGet IT in your inbox daily

112 Comments

More from The Register

Cambridge Analytica seeks data protection assistant

Jobseeker? You may have heard of it...

UK.gov's Brexiteers warned not to push for divergence on data protection laws

As PM lacks specifics on UK’s desired ‘adequacy-plus’ deal

Uber hack: EU data protection bods launch taskforce

Justice commissioner slams biz for 'irresponsible' behaviour

Big tech wants the ICO on EU data protection board in Brexit fallout

Watchdog keeping voting rights 'huge gain' for marketing sector, say Facebook, Google et al

UK regulator moots data protection sandbox for organisations to play in

ICO strategy outlines plans to slurp up academic expertise

Austrian privacy chief handed leash to EU's data protection beast

Group warms up for greater powers once GDPR hits

Facebook smartmobe app's pre-ticked privacy settings violate German data protection law

Court favours consumer group in long-running dispute

Don't sweat Brexit, big biz told: Your shiny data protection sticker will remain intact

Survey reveals GDPR training and investment is on the rise

UK.gov told: Scrap immigration exemption from Data Protection Bill or we'll see you in court

Campaigners say proposed law would create a 'discriminatory' system for data access rights

Irish eyes are sighing: Data protection office notes olagoanin'* up 79%

Annual report reveals boost in complaints, breach notifications