Updated 25 May 2026Independent public-interest briefing

The digital state is being built in public.

The Online Safety Act is now enforced through fines, technical codes and platform pressure. The UK Digital ID proposal has moved into consultation analysis. Both deserve democratic scrutiny before their infrastructure becomes normal.

Latest developments

Enforcement, identity architecture and the unresolved democratic questions.

The site has been updated from a warning about future powers to a dossier on powers now being used. These are the newest signals from Ofcom, GOV.UK and Parliament.

21 May 2026

Major platforms make anti-grooming commitments

Snap, Meta and Roblox committed to stronger anti-grooming measures after Ofcom demands, while Ofcom increased scrutiny of TikTok and YouTube recommender feeds.

Why it matters: The regulator is moving from guidance into direct operational pressure on platform design, including potential use of inspection powers.

Source

18 May 2026

Hash-matching recommended for intimate image abuse

Ofcom strengthened its Illegal Content Codes by recommending hash-matching technology for certain illegal intimate images, subject to Parliamentary process.

Why it matters: The policy direction continues to expand automated detection duties, raising recurring questions about scanning, errors and safeguards.

Source

13 May 2026

£950,000 fine and possible blocking order

Ofcom fined an online suicide forum £950,000 and said it was preparing a court-order application to block UK access if non-compliance continued.

Why it matters: The Act is now visibly backed by heavy penalties and access-blocking escalation, not just platform guidance.

Source

13 May 2026

Age-assurance enforcement widens

Ofcom opened or expanded investigations into multiple adult-content services and issued a provisional contravention notice to fapello.com.

Why it matters: Age checks are no longer theoretical; enforcement is spreading across the long tail of services where privacy practices may be opaque.

Source

Risk matrix

Where the damage can compound

Each card links the new developments to the structural risk: privacy loss, automated enforcement, exclusion, function creep and weak democratic consent.

Critical

Online Safety Act

Enforcement reach

The Act now has live penalties, information demands and potential blocking orders behind it.

Escalating

Online Safety Act

Automated scanning drift

Safety duties are increasingly expressed as technical detection requirements.

High

Online Safety Act

Age-check privacy

Age assurance has moved from policy debate into routine access control.

Critical

Digital ID

Function creep

The government says the scheme will begin with public services and right-to-work evidence, but identity infrastructure tends to expand.

High

Digital ID

Exclusion by design

A phone-first identity system risks disadvantaging people with unstable documents, devices, connectivity or trust in government systems.

Escalating

Digital ID

Democratic consent

Public opposition is large, organised and still unresolved after consultation.

Case files

Two programmes. One expanding theory of state-mediated access.

The Online Safety Act governs access to speech and platforms. Digital ID governs access to work and public services. The risk sits in the overlap: identity, permissions and automated compliance.

01

Regulatory power now in motion

Online Safety Act 2023

The 2026 story is no longer whether the Act will be enforced. It is being enforced through fines, information demands, age-assurance investigations, code changes and direct pressure on platform systems.

£950,000 Ofcom fine announced in May 2026
Age-assurance investigations widened on 13 May
Hash-matching code changes expected in autumn 2026
30+ providers received legally binding risk-assessment requests
02

The architecture phase has begun

UK Digital ID / BritCard

After the 2025 backlash, the government's 2026 language is more careful: it says people will not be forced to hold or show digital ID. Yet right-to-work checks remain the practical wedge into everyday life.

Consultation ran 10 March-5 May 2026
Feedback is currently being analysed
2,984,191 signatures on the main petition
Expected by the end of this Parliament

Democratic questions

The issue is not whether safety and identity matter. It is who controls the infrastructure.

This site tracks the gap between ministerial assurances and the practical architecture being built: scanning duties, identity checks, data trails, access gates and enforcement escalation.

The democratic test is simple: can citizens understand, contest and opt out of the systems that increasingly mediate speech, work and services?

What must remain outside the system?

A democracy should define the limits of identity and safety infrastructure before deployment, not discover them after every service depends on it.

Who audits the auditors?

Age-assurance vendors, platform risk models and government identity systems need independent scrutiny, public reporting and enforceable deletion rules.

Where is the analogue right?

If access to work, speech or public services depends on devices and databases, failure modes become civil-liberties problems.

How does Parliament unwind mistakes?

Sunset clauses, narrow powers and clear appeal rights matter because infrastructure is much harder to remove than legislation is to announce.

Request the dossier

Get the research notes behind the briefing.

Receive updated research on the Online Safety Act, Digital ID, enforcement timelines, source links and practical questions to raise with representatives.

Briefing file 01

OSA enforcement dossier

May 2026 enforcement actions, age-assurance investigations, blocking risk, automated detection and unresolved encryption questions.

Briefing file 02

Digital ID risk dossier

Consultation status, petition evidence, right-to-work gateway risk, function creep, exclusion and statutory safeguard gaps.

Secure delivery

Evidence briefing access

No spam. No behavioural profiling. Unsubscribe is available from every message.