UK Plans Law to Block Nude Images on Children’s Phones and Tablets

The UK government is preparing legislation aimed at making it impossible for under-18s to take, share or view nude images on their smartphones and tablets. The intended rules would put responsibility on device-platform providers such as Apple and Google, alongside providers of apps used by children, to provide protections that work across the relevant services—not simply offer optional settings.1

The announcement marks a shift from voluntary commitments to legislation. It is a policy intention rather than an enacted law, and key implementation details have yet to be published.

What the planned law is intended to require

The government’s stated objective is device-level protection for children: technology companies would need to activate built-in features or introduce technical solutions capable of detecting and blocking nude imagery on phones and tablets used by under-18s.1

The approach is broader than a restriction on a single messaging service. Ministers also intend to pursue requirements for apps used by children, so that children cannot access or share nude imagery through those services. The practical scope—such as which apps, operating-system functions and types of imagery are covered—will depend on the legislation eventually brought forward.

The original policy direction envisaged protections being on by default for children, with adults able to access unblocked functionality only after proving they are over 18.1

Why the government is turning to legislation

In June, Apple and Google were given three months to set out roadmaps and strengthen protections voluntarily. The government had said it would legislate if the industry did not deliver sufficient action within that period.1

Ministers later acknowledged meaningful operating-system changes and progress toward blocking rather than merely blurring nude imagery on underage devices. Apple’s age-check rollout and safety protections were cited as significant developments. But the government’s conclusion was that voluntary progress was not comprehensive enough across the wider device and app ecosystem.1

That distinction matters. A protection that works in one communications feature may reduce risk, but it does not necessarily stop images being created, saved, exchanged or accessed elsewhere on a device. The proposed law is intended to close that gap.

What companies were warned could happen

The initial ultimatum was backed by the prospect of legislation if voluntary measures fell short. The earlier policy reporting described potential corporate fines for non-compliance and the possible use of criminal liability for senior technology executives as a last resort.1

No final enforcement model has been published. Until a bill is introduced, it is not possible to say which penalties, regulator powers or compliance tests will become law.

The harm the policy is trying to prevent

The focus is on images children produce or share themselves, often in circumstances involving grooming, coercion or blackmail. The Internet Watch Foundation (IWF) assessed 424,047 reports in 2024 and confirmed 291,273 as containing, linking to or advertising criminal child sexual abuse imagery. Of the reports it assessed as criminal, 91% contained self-generated imagery.5

Sextortion is one route through which this harm can escalate: a child may be pressured into sending an image, then threatened with its distribution unless they send more images, pay money or comply with other demands.

Childline’s data also illustrates the pressure on support services. Between April 2025 and March 2026, it delivered 2,444 counselling sessions concerning online child sexual abuse and exploitation; 242 of those sessions mentioned financially motivated sextortion.2 The IWF has separately reported that reports of child sexual extortion rose 72% year on year in the first half of 2025, with boys comprising 97% of confirmed cases in that dataset.4

These figures do not prove that device-level controls alone will prevent exploitation. They do, however, explain why ministers are seeking to interrupt the process before an image can be created, shared or used for blackmail.

Apple and Google: existing tools, but an incomplete solution

Apple and Google already provide some child-safety and supervised-account tools. Apple’s Communication Safety feature has been designed to warn or protect younger users around nude imagery in supported communications contexts, while Google has child-safety controls associated with supervised experiences.

The government’s position is that such measures are not yet enough if they do not reliably cover the whole device and the apps children use. The proposed legislation is therefore directed at a higher bar: protections that are built into the child’s device experience rather than left as limited or optional features.1

The privacy and surveillance question

The policy’s central unresolved question is how a device distinguishes an adult from a child, and how it detects nudity, without creating excessive monitoring of lawful private activity.

Digital-rights campaigners have warned that age-assurance systems can involve biometric age estimation, identity checks, behavioural profiling or data sharing. The Open Rights Group has argued that online age checks can become invasive digital-identity processes rather than simple offline-style proof-of-age checks.

The same concern applies to image controls. A system intended to protect children could involve analysis of private images on a device or in communications services. Its privacy impact will depend on choices not yet specified publicly: whether detection happens on-device or through a service, whether image data leaves the device, how false positives are handled, what information is retained, and what independent oversight or appeals exist.

A workable bill will need to show that it can protect children while limiting data collection, preventing misuse and preserving a realistic route for adults to access lawful content.

What happens next

The government has said it will bring forward primary legislation, but has not set out a precise timetable or published the full technical and legal framework. That leaves substantial questions for Parliament, technology companies, child-safety groups and privacy advocates.

Child-protection organisations argue that voluntary measures have not moved quickly enough given the rise in sextortion and self-generated abuse imagery. Privacy advocates, meanwhile, will scrutinise whether the final model turns safety controls into routine identity checks or default content scanning.

The test for the legislation is therefore twofold: it must meaningfully reduce children’s exposure to coercion and image-based abuse, while setting clear, proportionate limits on how people’s identities and private images are handled.