Ofcom to require platforms to detect non-consensual sexual imagery

Ofcom has announced that it is strengthening its Illegal Content Codes to include a recommendation that tech companies implement automated detection technology to curb the spread of non-consensual sexual images, including explicit deepfakes. The recommendation will require websites and applications in scope to expand their use of "hash matching" software to better protect women and girls online.

Ofcom claims that implementing the proactive safety measure, alongside new legislation banning nudification tools and mandating a 48-hour takedown window for unconsented explicit material, will significantly diminish online abuse. Pending parliamentary approval, the amendments are expected to come into force in autumn 2026, alongside decisions on additional safety measures proposed in an earlier consultation.

Training Announcement: The IAPP Certified Information Privacy Technologist (CIPT) is a privacy-focused professional IT certificate from the IAPP that addresses data protection requirements and controls within complex technological environments. It explores the data lifecycle, privacy risk models and frameworks, the principles of Privacy by Design, and the role of privacy-enhancing technologies within the organisation. Find out more.