Ofcom strengthens rules on intimate image abuse

The communications regulator, Ofcom, have published a statement adding new measures to their Illegal Content Codes of Practice. They make new recommendations to online platforms to use automated detection technology to reduce the spread of illegal intimate images.

The Online Safety Act 2023 made the sharing of, or threatening to share, non-consensual intimate images illegal. Ofcom note that since the Act was passed this kind of abuse has increased, compounded by the rise in Generative AI ‘deepfake’ technology to create images.

Ofcom are recommending that certain service providers, such as social media, messaging platforms, and online forums, adopt ‘hash matching’ technology to detect illegal intimate images shared without consent, including explicit deepfakes.

Hash matching works by creating a ‘hash’ or digital fingerprint from a harmful image. This fingerprint will be identical for every copy of the image that might occur online. The hash is stored in a database and can be matched against attempts to upload new versions of the image. Key to this technology is that the hash, or fingerprint, and not the image, is shared with service providers.

Ofcom included this recommendation with a raft of measures suggested in a consultation back in June last year. They expect those new safety measures to be announced in the autumn. However, they have chosen to confirm this particular recommendation in advance because it can make a substantial difference to combatting intimate image abuse online. Some providers are already using services such as StopNCII.org and it has been shown to reduce the volume of intimate image abuse being viewed or shared online.

Subject to Parliamentary process, Ofcom expect these amendments to their Illegal Content Codes to come into force in the autumn this year.

The Technology Secretary, Liz Kendall, said: “Existing technology must now be used to put a permanent stop to intimate image abuse, by recognising illegal images and blocking them before they can cause further harm. No more excuses.”

The campaign group End Violence Against Women said it welcomed Ofcom’s announcement but that “its new recommendation ... is just that: a recommendation”.

“We need to see the regulator take proactive action that has teeth, requiring tech companies to implement preventative measures or face consequences,” said Rebecca Hitchen, their Head of Policy and Campaigns.