The UK’s experiment with mandatory online age verification has reached a critical moment after Ofcom opened an investigation into Pornhub’s parent company.
Britain wanted to make it harder for children to access online pornography.
Now the country’s biggest online-safety experiment is facing a much bigger question:
Do age-verification systems actually work well enough to protect children without creating new privacy and technology problems for adults?
On September 22, 2026, UK communications regulator Ofcom opened an investigation into Aylo, the company behind Pornhub, over concerns that its age-assurance system may not be sufficiently effective.
The investigation could have consequences far beyond one website.
It could help determine what regulators expect from the entire global adult-content industry.
Why It Matters
The UK’s Online Safety Act requires services offering pornography to use highly effective age assurance.
The rules became mandatory for relevant services in July 2025.
Ofcom says the system must be technically accurate, reliable and effective at determining whether a particular user is a child.
The problem is that there is no single perfect method.
Companies can use different combinations of age verification, age estimation, device-level signals and other technologies.
Pornhub introduced a new system for some UK users in May 2026 that relies on signals from Apple indicating that a user may have completed Apple’s age checks.
Ofcom is now questioning whether Aylo carried out enough due diligence and testing before deploying the system.
Importantly, Ofcom’s investigation is focused on Aylo’s compliance, not an investigation into Apple itself.
The Details
The stakes are significant.
If Ofcom ultimately finds a breach, it can impose a fine of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater.
That means age verification is no longer simply a technical feature.
For major internet companies, it is becoming a material regulatory and financial risk.
And Britain has already demonstrated that it is willing to enforce the rules.
In July 2026, Ofcom fined another adult-content provider £600,000 for failing to have appropriate age checks, plus another £30,000 for failing to respond to an information request on time.
The regulator has also opened investigations involving multiple adult-content websites.
The Bigger Business Problem
The adult industry now has to solve two competing problems.
First:
How do you reliably establish that someone is over 18?
Second:
How do you do it without collecting unnecessary information about that person?
That second question matters because age verification can potentially involve highly sensitive personal information.
A system requiring users to submit identity documents creates one set of risks.
A system based on facial or age estimation creates another.
Device-level verification may reduce the amount of information an individual website directly sees, but regulators still have to determine whether the overall process is sufficiently reliable.
Britain Is Becoming a Global Test Market
The UK is effectively becoming a laboratory for online age assurance.
Ofcom reported in July that the proportion of children encountering highly effective age checks had increased from 25% to 43% between July 2025 and January 2026.
Among children who attempted to access pornography, Ofcom found that half reached only sites with age checks.
That suggests age gates can have a deterrent effect.
But it also highlights the central problem:
blocking one route does not necessarily eliminate access across the entire internet.
What This Means for the US
America is taking a different approach.
Instead of one nationwide system, individual states have introduced age-verification laws.
That creates a fragmented regulatory environment where the requirements can change depending on where a user lives.
The UK experiment could therefore become extremely important for US policymakers.
If Britain’s system demonstrates effective protection without excessive privacy costs, US states may look toward similar models.
If implementation creates major circumvention, privacy or compliance problems, the debate could move in the opposite direction.
What’s Next
Ofcom’s investigation will now gather evidence before deciding whether Aylo has breached its legal obligations.
For Pornhub and the wider adult industry, the outcome could establish an important precedent.
The real question is no longer whether age verification is coming.
It is whether the technology can become accurate, private and scalable enough to satisfy regulators.
And that is a problem that extends far beyond pornography.
It could eventually affect social media, gambling, gaming, dating, AI platforms and other services where governments want to establish a user’s age online.
FAQ
Why is Ofcom investigating Pornhub?
Ofcom is investigating whether Aylo’s age-assurance system is sufficiently effective under the UK’s Online Safety Act.
How much could the company be fined?
Ofcom says penalties can reach £18 million or 10% of qualifying worldwide revenue, whichever is greater.
When did UK age checks become mandatory?
The major deadline for services allowing pornography was July 2025.
Is Apple being investigated?
No. Ofcom says its investigation concerns Aylo’s implementation and compliance rather than Apple’s age-verification technology.
Could this affect the US?
Potentially. The UK is creating a major real-world case study for age assurance that could influence regulatory discussions elsewhere.
Related Reading
- AI Is Rewriting the Adult Entertainment Business
- Why America Is Building a Patchwork of Online Age-Verification Laws
- Who Gets Your Data When You Prove You’re 18 Online?