UK's Ofcom Mandates Tech Firms to Combat Non-Consensual Intimate Images and Deepfakes
The UK's communications regulator, **Ofcom**, is set to enforce stricter measures on tech companies to tackle the spread of non-consensual intimate images and AI-generated deepfakes. The updated codes of practice will require platforms to proactively detect and remove such content, with potential penalties for non-compliance.
## Ofcom Tightens Grip on Online Abuse
**Ofcom**, the UK's top communications regulator, announced Monday that it will require tech companies to ramp up efforts in identifying and removing non-consensual intimate images from their platforms. This initiative also targets the proliferation of deepfakes generated by artificial intelligence.
The updated codes of practice are expected to be implemented this autumn, pending approval from the UK Parliament. These changes reflect an increasing urgency to safeguard users, particularly women and girls, from online harm.
## Hash Matching Technology to the Rescue
To effectively detect and prevent the spread of illicit images, **Ofcom** is advocating for the wider adoption of "hash matching" technology. This technique involves converting images into unique digital fingerprints, which are then stored in a database. By comparing new uploads against this database, platforms can identify and block the re-uploading of identical or similar content.
## Legislation Backing Ofcom's Mandate
This move aligns with new legislation that aims to ban "nudification" tools and mandates the removal of non-consensual intimate images within 48 hours. According to **Ofcom**, these measures will significantly enhance the protection of women and girls online.
In February, UK Prime Minister Keir Starmer emphasized the necessity of the new law, which imposes substantial fines on tech firms that fail to promptly remove intimate images. Starmer also warned that companies failing to comply within the stipulated timeframe could face service blocking.
The British government's focus on this issue intensified following the widespread dissemination of millions of nudified images of non-consenting women and children through **xAI**'s **Grok** chatbot.
## A Different Path Than the EU
**Ofcom**'s approach differs from that of some of its European counterparts. A recent European Union law that allowed tech firms to scan communications for child sexual abuse material (CSAM) expired last month due to privacy concerns. While tech giants have stated their intention to continue scanning for CSAM, European Commission officials have indicated that this practice may be unlawful under current regulations.

*Suzanne Smalley is a reporter covering digital privacy, surveillance technologies and cybersecurity policy for The Record.*