Keep Factually independent

Whether you agree or disagree with our analysis, these conversations matter for democracy. We don't take money from political groups - even a $5 donation helps us keep it that way.

Loading...Goal: 1,000 supporters
Loading...

Fact check: Is there any legitimacy to the claims that the UK online safety act could compromise people's privacy?

Checked on September 9, 2025

1. Summary of the results

Based on the analyses provided, there is substantial legitimacy to claims that the UK Online Safety Act could compromise people's privacy. Multiple sources confirm significant privacy concerns:

The Electronic Frontier Foundation explicitly states that the UK's Online Safety Act is a threat to user privacy, restricts free expression, and exposes users to algorithmic discrimination through face checks [1]. Privacy advocates and campaigners argue that the new rules threaten users' freedom and that age verification methods are invasive without being sufficiently effective [2].

Silkie Carlo, director of Big Brother Watch, specifically warns that digital age checks can lead to "security breaches, privacy intrusion, errors, digital exclusion and censorship" [2]. The Act introduces mandatory age verification requirements and potential VPN bans, along with concerns about widespread censorship and data breaches [3].

The Act's extraterritorial scope and enforcement powers have raised particular concerns about privacy and data protection, especially regarding encrypted messaging services [4]. Critics describe the Act as an overreach of government power and a threat to free speech, with a vague definition of "harmful content" leading to unintended consequences such as silencing chatrooms and restricting online content [5].

2. Missing context/alternative viewpoints

The original question lacks important context about the government's stated intentions behind the Act. Government sources emphasize that the legislation aims to protect vulnerable individuals from devastating self-harm content and strengthen online safety laws to protect people of all ages [6].

Technology companies and age verification service providers would benefit financially from the implementation of mandatory age verification systems, as they would be required to develop and deploy these technologies across platforms. Government officials and child safety advocates would benefit from public acceptance of these privacy trade-offs, as it validates their regulatory approach.

The analyses reveal that many users are already circumventing the Act's requirements by using VPNs [1], suggesting that the privacy concerns may be driving behavioral changes that potentially undermine the Act's effectiveness.

The Act's implementation has already led to measurable consequences, including the restriction of online content and the silencing of chatrooms, indicating that privacy concerns are not merely theoretical but are manifesting in real-world impacts [5].

3. Potential misinformation/bias in the original statement

The original question does not contain misinformation but could be seen as potentially leading by asking about "legitimacy" rather than simply asking about privacy impacts. However, this framing is reasonable given that multiple credible sources, including digital rights organizations and privacy advocates, have raised substantive concerns [1] [2] [3].

The question appropriately focuses on privacy concerns rather than dismissing them, which aligns with the evidence showing that respected organizations like the Electronic Frontier Foundation and Big Brother Watch have documented specific privacy threats from the legislation [1] [2].

Want to dive deeper?
What are the key provisions of the UK online safety act regarding data collection?
How does the UK online safety act balance online safety with individual privacy rights?
Which UK government agencies will have access to data under the online safety act?
What safeguards are in place to prevent misuse of personal data under the UK online safety act?
How does the UK online safety act compare to EU data protection regulations in terms of privacy?