UK Regulator Investigates Pornhub's Apple-Powered Age Checks

The UK's communications regulator, Ofcom, has launched an investigation into Aylo, the parent company of Pornhub, to determine if its age verification methods comply with the country's Online Safety Act (OSA). The probe specifically scrutinizes the effectiveness of Pornhub's age checks, which leverage signals from Apple's systems to prevent minors from accessing adult content.

This investigation centers on Aylo's implementation, testing, and due diligence of the age assurance process, rather than the internal workings of Apple's technology. Ofcom's mandate under the OSA requires online services to assess the likelihood of children accessing their platforms and to implement robust age verification measures. The regulator will examine whether Aylo met these obligations when introducing its new age assurance process for UK users in May 2026.

Pornhub had previously restricted access for new UK users in February 2026, citing concerns that the OSA was driving traffic to less regulated sites. This move followed a significant drop in UK traffic, reportedly 47 percent shortly after the OSA's age assurance duties took effect, and a further 77 percent decline by October. In an effort to comply with evolving regulations and user access demands, Aylo later partially reinstated access for eligible UK users who had verified their age via Apple's system, though users on Android and other platforms remain blocked.

George Lusty, Ofcom's director of enforcement, emphasized the critical role of online age checks in protecting children. "We expect tech firms to ensure age checks are highly effective before introducing them," Lusty stated. "Anything less could leave children at risk." Ofcom's assessment will cover both the technical efficacy of Pornhub's age assurance process and the thoroughness of Aylo's pre-deployment testing and due diligence.

Under the OSA, service providers must regularly re-evaluate their risk assessments, particularly when making significant changes to their services or when evidence suggests age checks are becoming less effective. Ofcom will gather evidence to ascertain if Aylo has contravened the Act. Should a provisional finding of non-compliance be made, Aylo will be given an opportunity to respond before a final decision is reached.

Penalties for non-compliance under the OSA can be severe, including fines of up to £18 million or 10 percent of a company's qualifying worldwide revenue, whichever is greater. Ofcom also has the power to order remedial actions and, in cases of persistent non-compliance, seek court orders to restrict service access through intermediaries like ISPs. In certain instances, failures related to information requests could even lead to criminal liability for senior managers.

The investigation occurs amidst broader scrutiny of Ofcom's enforcement actions. The regulator has faced criticism from some lawmakers and officials for perceived inaction since the OSA's age assurance requirements were implemented. However, Ofcom has defended its efforts, highlighting enforcement actions against other platforms like Telegram, TikTok, and X, and signaling an intent to target larger companies as initial cases conclude.

Despite these efforts, Ofcom acknowledges limitations, particularly concerning companies operating internationally with minimal UK assets, which can complicate the enforcement of fines. The ongoing investigation into Pornhub's age verification system will be a key test of Ofcom's ability to enforce the OSA's provisions effectively.