Why Highly Effective Age Assurance is the Digital Equivalent of Keeping Adult Content Out of Children’s Reach.
Before the Internet, access to adult content was governed by a simple physical rule: children couldn’t reach what they couldn’t see. Adult video tapes were sold inside adult-only stores that had covered windows; and magazines containing adult content weren’t banned or hidden completely but placed out of reach on the top shelf of newsagents. It was a pragmatic solution, not entirely foolproof, but widely accepted.
With the introduction of the UK Online Safety Act, and the debate surrounding age assurance, we are essentially returning to this principle, updated for the digital age. Yet critics argue that age verification technology is inherently flawed or ripe for abuse. If we step back from the binary rhetoric of privacy versus protection, it becomes clear that the proposed digital safeguards mirror measures we’ve already deemed necessary in the physical world.
A Brief History of the Top Shelf
The idea of placing adult magazines on the top shelf of shops emerged from growing public concern in the 1970s and 1980s about children’s exposure to sexually explicit content. Though there was no specific legislation mandating the practice, it was reinforced by voluntary codes of conduct and the influence of the Indecent Displays (Control) Act 1981. This Act prohibited the public display of indecent material that could be seen by children or non-consenting adults, and retailers adopted the “top shelf” as a practical compromise.
Newsagents, supermarkets, and convenience stores agreed to keep pornographic magazines above children’s eye level, often with covers partly obscured by modesty boards. This system relied not on surveillance or identity checks but on design and societal consensus. We accepted the idea that adult content was legal but should be restricted to adults. It worked – perhaps imperfectly – but well enough to be accepted in society for decades.
The Challenge of the Digital Shelf
Fast forward to 2025. Children now navigate digital environments far more freely than physical ones. The internet has no shelf height. Age gates – simple pop-ups asking users to confirm they’re over 18 – are effectively useless, as any child can click “Yes”. And unlike a newsagent, the web doesn’t come with a shopkeeper who can intervene.
The Online Safety Act 2023, overseen by Ofcom, is the UK’s legislative attempt to replicate these social norms online. At its core, the Act mandates platforms that host user-generated or pornographic content to implement Highly Effective Age Assurance technologies. According to Ofcom’s detailed guidance released in 2024 and in early 2025, this doesn’t simply mean checking a tick-box. It means deploying proven, privacy-preserving technologies that can reliably estimate or verify a user’s age.
What is ‘Highly Effective Age Assurance’?
According to Ofcom’s official guidance (Part 3 of its age assurance statement), a “highly effective” system is one that:
• Minimises the risk of children accessing harmful content.
• Is accurate and resistant to circumvention.
• Protects user privacy and data security.
• Does not unduly restrict adult users from accessing legal content.
These systems can range from age estimation using facial analysis (without retaining biometric data), to checks against government-issued ID or Open Banking and the use of one-tap digital identity solutions such as provided by the Luciditi App. Presented to relying parties and end users as GDPR-compliant privacy-preserving multi-option solutions, leveraging zero-knowledge proofs or equivalent methods to confirm age without disclosing personal identity or traceable information.
Furthermore, “orchestration service providers” like Luciditi can provide solutions that provide end-users with multiple ways to prove their age – all of which
This is not surveillance – it’s selective access control and disclosure. Just as we did not demand names or addresses at the newsagent’s counter, the goal here isn’t to build dossiers on citizens, but to keep adult content where it belongs: accessible to adults, not children and ensuring that the content cannot be accidentally or inadvertently stumbled upon while casually surfing the web. In 2023, The Children’s Commissioner reported that a quarter of young people had encountered pornography by the age of just 11.
Critics and Concerns
Critics of age assurance suggest that these measures are a Trojan Horse for censorship and state control. They warn that mandatory verification could drive users to unregulated or offshore sites or expose them to data breaches.
These concerns are not entirely unfounded – early age verification systems in the UK (such as the 2019 Digital Economy Act’s attempted implementation) failed due to poor planning and data protection issues. Technology has moved on as has our understanding and implementation of solutions built upon the principle of privacy by design. We now have biometric estimation tools that don’t store images, encrypted ID checkers, and robust oversight and enforcement from Ofcom to ensure transparency.
Moreover, the comparison to censorship falls short. Censorship is about restricting content for everyone. Age assurance is about restricting content for children. The distinction is fundamental.
Conclusion: From Paper to Pixels
The principle underpinning Ofcom’s guidance on highly effective age assurance is not new – it’s simply a modern reapplication of the values that have governed adult content for decades. The physical world used shelf height and obscured covers; the digital world uses encrypted ID checks and biometric age estimation.
In both cases, society accepts that legal adult content should be restricted to adults. The Online Safety Act makes that principle enforceable online, where shelf height is no longer a barrier.
Far from being a scam or surveillance plot, age assurance done well is a necessary evolution of longstanding norms. And just as few today question the logic of putting adult magazines out of children’s reach, so too should we come to see highly effective digital age assurance as common sense in the online era.
Want to know more?
Luciditi technology can help organisations implement Digital Identity and Age Proofing Technology for online and in person use cases. If you would like to know how, Contact us for a chat today.