Ofcom set out which age checks could enforce a UK under-16 rule.

What changed

On October 29, 2026, Ofcom published a rapid assessment of what “highly effective age assurance” could look like for deciding whether someone is 16 or over. Ofcom wrote it ahead of parliamentary debate on proposed UK age restrictions. Those proposals include limits on under-16s accessing social media services, and limits on some risky features. Ofcom says the government has stated that highly effective age checks, rather than the “reasonable steps” test used in Australia, will be critical to putting the ban in place.

The package itself is older. Ofcom’s assessment says the government announced it in June 2026: a ban on social media providers offering services to under-16s, limits on under-16s using features such as livestreaming and contact from strangers, and those features off by default for 16- and 17-year-olds. The government fact sheet, last updated September 18, 2026, says the first regulations will be laid before the end of the year and the changes should be implemented in spring 2027. It says the plan follows Australia’s model and would include platforms such as Instagram, YouTube, TikTok, Snapchat, Facebook, and X. It says the government does not intend to include messaging services such as WhatsApp and Signal. It also says parents and children do not need to do anything right now.

Ofcom’s preliminary assessment names four methods it considers capable of being highly effective at 16:

• Photo ID matching. The check uses information on a photo ID and compares the photograph on the document with an image of the person taken during the check.
• Digital identity services. A person can share an already verified attribute, such as an age or an age range. Ofcom says these services are currently unlikely to be available to 16- and 17-year-olds who do not have a photo ID.
• Banking information. With the person’s consent, a bank or other financial institution’s record of their age can be shared as an age, an age range, or a date of birth. Ofcom says this is wider than the open-banking method in its existing guidance, and that an online payment method which does not require the user to be over 16 cannot be used as a highly effective check at 16.
• Facial age estimation. The check estimates an age from facial features, and a person can typically start it without a photo ID. Ofcom says the error matters most near 16. Using NIST test results, it reports that the lowest mean absolute error for ages 13 to 17 was 1.77 years, and that an estimate accurate within two years could place a 15-year-old at 17. Ofcom says services should set a challenge age, and that people estimated near 16 would be more likely to need another proof. Its example: if the challenge age were 19, someone estimated between 16 and 19 would likely need a further check.

Three further methods can show that someone is 18 or over, and therefore also over 16, but Ofcom does not treat them as highly effective at 16 itself. A credit-card check cannot show that someone is 16, because a person must be 18 or over to obtain a credit card in the UK. A mobile-network operator check can show that an adult filter has been removed, and Ofcom says a content filter does not currently exist at 16. Email-based estimation, and estimation from a mobile number, is not currently capable of reliably telling 16 from 17, because many of the strongest signals come from adult services.

Ofcom says typing a date of birth, or ticking a box, is not highly effective age assurance. A line in a terms of service that merely says users should be over a certain age is not either. It also says current age-inference models, which estimate age from how someone uses a service, cannot be the main gate for new users, because they need activity on the service first. Those models might later help find accounts that got past a check.

Other points in the assessment:

• There is less choice of highly effective methods at 16 than at 18. Ofcom’s existing guidance lists seven methods at 18. This assessment did not find a new method that would be ready before the ban comes into force. It says new methods that might use a public-information gateway are unlikely to be market-ready by spring 2027.
• 16- and 17-year-olds are more likely than older users to need a photo ID at some point. That includes a backup when a face estimate falls in the challenge range, and the photo ID that often sits behind a bank account or a digital identity. People without one would likely need to obtain one to use an age-restricted service. Ofcom says one alternative is a card certified by the Proof of Age Standards Scheme, and that since October 1, 2026, CitizenCard has offered its card to 16- and 17-year-olds in the UK for free. Ofcom cites an estimate, from a non-representative school survey, that around 150,000 16- and 17-year-olds hold neither a passport nor a provisional driving licence.
• Many adults on large social media services are also likely to have to show they are over the age. Some existing accounts may not need a new check if the service already holds accurate and reliable information that they are over the required age.
• No method is completely robust against children getting around it. Ofcom expects some children will try, including with a VPN. It says a correct implementation should significantly reduce that likelihood, not remove it. Ofcom will publish a report on circumvention within twelve months of the ban coming into effect.

The same day, Ofcom published its statutory report on app stores, to inform a government decision on whether to bring app stores into the Online Safety Act. App stores are not currently regulated services under the Act. Ofcom says the stores it looked at did not consistently use age assurance to establish whether a user was a child, so children had little incentive to enter an accurate age. It also says age assurance alone would not produce better protections. Stores would also need reliable information about an app’s age suitability and risks, and well-designed protections. Parental tools could play a complementary role. Ofcom says that even if stores are regulated later, the services themselves would still have to show that their overall age check is highly effective.

What you can do

Nothing in the October 29 documents changes a setting on your child’s phone. The fact sheet says parents and children do not need to do anything right now, and that further detail will come ahead of the 2027 changes.

• Leave the family setup as it is until a service actually asks for a check. Ofcom is consulting on guidance after the draft regulations are laid. The assessment does not name a menu in Apple Screen Time or Google Family Link.
• If a later check appears, read what it is asking for. The four methods Ofcom treats as capable at 16 are photo ID matching, a digital identity, banking information, and facial age estimation, with extra proof when a face estimate is close to 16. A birthday box by itself is not on that list.
• Do not lend an adult ID so a child can pass. Ofcom lists a parent knowingly providing identification for a child as one way photo ID matching can be circumvented, alongside borrowed, stolen, forged, or synthetic documents.
• Keep the limits you set yourself. Ofcom expects some children to try to get around checks, and app-store age checks are not a requirement today. A schedule you set still decides when apps are available. Apple’s time controls are one way to do that. A short family agreement still covers what happens when someone asks for more time.

Sources

• Rapid assessment of highly effective age assurance at 16Ofcom, published October 29, 2026. The summary page, and the assessment PDF, are the source for the four methods, the methods that work at 18 but not at 16, self-declaration, age inference, photo ID, circumvention, and the spring 2027 note on new methods.
• Report on the use of app stores by childrenOfcom, published October 29, 2026. App stores are not currently regulated under the Act, the stores reviewed did not consistently check whether a user was a child, and parental tools are described as complementary.
• Fact sheet: New rules to protect children onlineUK government, first published June 15, 2026, last updated September 18, 2026. The spring 2027 timing, the named platforms and the messaging exclusion, and the statement that parents and children do not need to do anything right now.