Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act

• URL: http://arxiv.org/abs/2606.05273v1
• Date: Wed, 03 Jun 2026 17:24:28 GMT
• Title: Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act
• Abstract summary: The UK Online Safety Act was passed in October 2023.<n>It extends age-assurance and safety requirements to social media, search, and pornography services.<n>Ofcom's illegal content enforcement duties came into force in March 2025.<n>Mandatory age verification for adult content took effect in July 2025.
• Score: 3.582984611144916
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: Governments worldwide are increasingly regulating digital platforms to reduce online harms, particularly those affecting children. However, access restrictions can alter user behaviour and introduce new privacy and security risks. The UK Online Safety Act (OSA), passed in October 2023, illustrates this trend: it extends age-assurance and safety requirements to social media, search, and pornography services, and rolled out in phases. Ofcom's illegal content enforcement duties came into force in March 2025, and mandatory age verification for adult content took effect in July 2025. This phased rollout enables real-time observation of behavioural responses to regulation. To address this, we analyse Reddit discourse across VPN and UK Politics communities and conduct a privacy-policy risk analysis of 69 unique VPN services. We find that each of these three milestones produced significant stepwise increases in VPN-related discussion on Reddit: among UK-based users, posts and comments explicitly about VPN use in a regulatory or privacy context rose by +100%, +217%, and +415% respectively. UK Politics communities showed even larger effects, with OSA-related political discourse rising by +213%, +545%, and +464%, respectively, among UK-based users. UK VPN search interest on Google rose by +89% at the age-verification deadline. Users primarily framed this response around privacy, surveillance, and distrust of age-verification intermediaries rather than simple access-seeking. Demand increased across low, medium, and high-risk VPNs, but the proportional distribution remained broadly stable. These findings suggest that online safety regulation can create secondary privacy costs even when it does not disproportionately shift attention toward higher-risk providers.

Related papers

• Age Verification in the Web -- Holy Grail to Control Access to Restricted Content [9.069548940598372]
  Age verification before accessing restricted content is critical to protecting minors from exposure to harmful material.<n>Currently, the absence of reliable age-checking mechanisms allows children extensive access to such adult content.<n>Our proposal addresses these challenges by leveraging open standards and cryptographic techniques.
  arXiv  Detail & Related papers  (2026-05-06T23:29:04Z)
• Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy [50.66105844449181]
  Individual Differential Privacy (iDP) promises users control over their privacy, but this promise can be broken in practice.<n>We reveal a previously overlooked vulnerability in sampling-based iDP mechanisms.<n>We propose $(varepsilon_i,_i,overline)$-iDP a privacy contract that uses $$-divergences to provide users with a hard upper bound on their excess vulnerability.
  arXiv  Detail & Related papers  (2026-01-19T10:26:12Z)
• "Nobody should control the end user": Exploring Privacy Perspectives of Indian Internet Users in Light of DPDPA [2.6885436577568904]
  We explore Indian Internet users' awareness and perceptions of cookie banners, online privacy, and privacy regulations, especially in light of the newly passed DPDPA.<n>Our findings reveal that privacy-conscious users often lack consistent awareness of privacy mechanisms.<n>Our study highlights the need for clearer communication regarding the DPDPA, user-centric consent mechanisms, and policy refinements to enhance data privacy practices in India.
  arXiv  Detail & Related papers  (2025-08-25T12:22:25Z)
• Evaluating Privacy Measures in Healthcare Apps Predominantly Used by Older Adults [2.7039386580759666]
  rapid growth has also heightened concerns about the privacy of their health information. We evaluated 28 healthcare apps across multiple dimensions, including regulatory compliance, data handling practices, and privacy-focused usability. Our analysis revealed significant gaps in compliance with privacy standards to such, only 25% of apps explicitly state compliance with HIPAA, and only 18% mention. Surprisingly, 79% of these applications lack breach protocols, putting older adults at risk in the event of a data breach.
  arXiv  Detail & Related papers  (2024-10-18T17:01:14Z)
• PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Action [54.11479432110771]
  PrivacyLens is a novel framework designed to extend privacy-sensitive seeds into expressive vignettes and further into agent trajectories.<n>We instantiate PrivacyLens with a collection of privacy norms grounded in privacy literature and crowdsourced seeds.<n>State-of-the-art LMs, like GPT-4 and Llama-3-70B, leak sensitive information in 25.68% and 38.69% of cases, even when prompted with privacy-enhancing instructions.
  arXiv  Detail & Related papers  (2024-08-29T17:58:38Z)
• Secure Aggregation is Not Private Against Membership Inference Attacks [66.59892736942953]
  We investigate the privacy implications of SecAgg in federated learning. We show that SecAgg offers weak privacy against membership inference attacks even in a single training round. Our findings underscore the imperative for additional privacy-enhancing mechanisms, such as noise injection.
  arXiv  Detail & Related papers  (2024-03-26T15:07:58Z)
• Cultural Differences in Students' Privacy Concerns in Learning Analytics across Germany, South Korea, Spain, Sweden, and the United States [47.11163387909141]
  Students' privacy concerns vary across national and cultural dimensions. German and Swedish students stood out as the most trusting and least concerned. Culture measured at the individual level affected the antecedents and outcomes of privacy concerns more than country-level culture.
  arXiv  Detail & Related papers  (2023-12-04T18:10:20Z)
• A Critical Take on Privacy in a Datafied Society [0.0]
  I analyze several facets of the lack of online privacy and idiosyncrasies exhibited by privacy advocates. I discuss of possible effects of datafication on human behavior, the prevalent market-oriented assumption at the base of online privacy, and some emerging adaptation strategies. A glimpse on the likely problematic future is provided with a discussion on privacy related aspects of EU, UK, and China's proposed generative AI policies.
  arXiv  Detail & Related papers  (2023-08-03T11:45:18Z)
• Having your Privacy Cake and Eating it Too: Platform-supported Auditing of Social Media Algorithms for Public Interest [70.02478301291264]
  Social media platforms curate access to information and opportunities, and so play a critical role in shaping public discourse. Prior studies have used black-box methods to show that these algorithms can lead to biased or discriminatory outcomes. We propose a new method for platform-supported auditing that can meet the goals of the proposed legislation.
  arXiv  Detail & Related papers  (2022-07-18T17:32:35Z)
• Ctrl-Shift: How Privacy Sentiment Changed from 2019 to 2021 [14.600192799641077]
  We study the sentiments of people in the U.S. toward collection and use of data for government- and health-related purposes from 2019-2021. After the onset of COVID-19, we observe significant decreases in respondent acceptance of government data use. Following the 2020 U.S. national elections, we observe some of the first evidence that privacy sentiments may change based on the alignment between a user's politics and the political party in power.
  arXiv  Detail & Related papers  (2021-10-18T16:13:02Z)
• Privacy-Aware Recommender Systems Challenge on Twitter's Home Timeline [47.434392695347924]
  RecSys 2020 Challenge organized by ACM RecSys in partnership with Twitter using this dataset. This paper touches on the key challenges faced by researchers and professionals striving to predict user engagements.
  arXiv  Detail & Related papers  (2020-04-28T23:54:33Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.