What Has Been Announced?

Prime Minister Sir Keir Starmer has confirmed that the government intends to introduce legislation before Christmas that will prevent under-16s from accessing a range of major social media services.

The ban is expected to come into force in Spring 2027 and will apply to platforms including TikTok, Instagram, Facebook, Snapchat, YouTube and X. Messaging services such as WhatsApp and Signal will not be included.

Announcing the plans, Starmer said: “That’s why we’re going further than any country in the world by banning social media for under-16s and putting wider protections in place to give kids their childhood back.”

The government has described the move as a “line in the sand” that will create “a new normal for future generations”.

The UK Is Going Further Than A Simple Ban

The proposal extends beyond simply preventing children from creating social media accounts.

The government has also announced restrictions on high-risk online features, including livestreaming and communication with strangers. These restrictions will apply not only to social media platforms but also to a wider range of online services, including gaming sites.

Importantly, some protections will remain switched on by default for 16 and 17-year-olds. Ministers say this is intended to avoid what they describe as a “cliff-edge at 16”, where protections would otherwise disappear overnight.

The government is also examining possible restrictions on infinite scrolling and overnight social media use for under-18s, with further details expected later this year.

Meanwhile, so-called AI “romantic companion” chatbots designed to simulate intimate or sexual relationships will be restricted to adults, while similar intimate AI functions will be limited for under-18s.

Why Is The Government Doing This?

The announcement follows a major public consultation that attracted more than 116,000 responses from parents, children and experts.

According to the government’s findings, nine in ten parents supported a social media ban for under-16s, while two-thirds of young people agreed that children under 16 should not be allowed to use at least some social media platforms.

The government argues that algorithmic feeds, real-time content, cyberbullying, harmful material, addictive platform design and online exploitation are creating risks that existing safeguards have failed to address.

Technology Secretary Liz Kendall said: “Today we take a bold and significant step towards creating a safer, healthier life online for our children and future generations.”

She also argued that technology firms had failed to act voluntarily, stating: “Tech companies have had countless opportunities to keep children safe, yet they have failed to act.”

How Will The Ban Be Enforced?

One of the biggest challenges will be ensuring that under-16s cannot simply bypass the restrictions.

The government says it intends to introduce stronger age assurance requirements and has asked Ofcom to carry out a rapid review into the most effective ways of verifying whether someone is over 16.

Officials have indicated that a range of methods could be used, including facial age estimation technology, identity verification and other forms of age assurance. Many adults may not need additional checks if their accounts are already linked to verified payment methods or age-verified accounts.

The government also says it is learning from Australia’s experience, where social media restrictions have already been introduced but enforcement has proved challenging.

Questions Remain

Not everyone supports the plans. For example, Meta, Snapchat and YouTube have all expressed concerns that blanket bans could push young people towards less regulated services that may be harder to supervise.

YouTube described itself as “a vital resource for young people, educators and parents”, while Meta warned that restrictions could risk isolating teenagers from online communities and information.

Privacy advocates have also raised concerns about age verification technologies, particularly where facial analysis or identity checks may be required to access online services.

Critics also point to evidence from Australia suggesting that many children have continued accessing social media despite restrictions, highlighting the practical difficulties involved in enforcing such bans.

Part Of A Global Trend

The UK’s decision reflects a broader international movement towards tighter controls on children’s access to social media.

Australia became the first country to introduce a nationwide under-16 social media ban, while countries including France, Spain, Greece, Denmark, Canada, Indonesia, Malaysia and others are either introducing similar measures or actively considering them.

Growing concerns about online harms, mental health, addictive platform design, cyberbullying and child exploitation are prompting governments around the world to reconsider the balance between online freedom and child protection.

What Does This Mean For Your Business?

For businesses, the immediate impact may be limited, but the wider significance is substantial.

The proposals signal a growing willingness by governments to intervene directly in how digital platforms operate, particularly where child safety, wellbeing and online harms are concerned. Social media firms, gaming platforms, AI developers and technology providers may all face increasing regulatory scrutiny over the coming years.

The plans also highlight the growing importance of age verification, digital identity, online safety and responsible technology design. Organisations developing online services may find that demonstrating effective safeguards becomes just as important as launching new features.

More broadly, the announcement reflects a wider change in how policymakers view digital platforms. For many years, governments largely relied on technology companies to regulate themselves. The UK’s proposed ban suggests that approach is increasingly being replaced by direct intervention when policymakers believe public safety concerns outweigh the benefits of unrestricted access.

The post Featured Article : Under-16s To Be Banned From Social Media From 2027 appeared first on Mear Technology.

What Is The Government Proposing?

The announcement came from Prime Minister Keir Starmer during London Tech Week, where he said the UK would become “the first country in the world to make it impossible for children to take, share or view nude images.”

Under the proposals, technology companies including Apple and Google would be expected to activate existing safety features or introduce new technical measures that detect and block nude images on devices used by children. Adults would still be able to access such content after completing age verification checks.

Three-Month Deadline

The government has given technology companies three months to develop suitable solutions. If they do not, ministers have indicated they are prepared to introduce legislation, financial penalties, and potentially other enforcement measures.

The government argues that stronger intervention is needed because online child sexual abuse, exploitation, and exposure to harmful content remain widespread. Home Office figures cited alongside the announcement indicate that 91 per cent of online child sexual abuse reports recorded in 2024 contained self-generated content from children themselves.

Why Is Signal Opposing The Plan?

Signal, one of the world’s best-known encrypted messaging platforms, has responded forcefully to the proposals. In a public statement, the company said the government’s approach “will not safeguard children. It endangers us all.”

The company’s main concern is not the goal of protecting children, but the technology required to achieve it. Signal argues that forcing devices to scan content before it is viewed, shared, or stored would create a new form of surveillance infrastructure capable of examining private information on users’ devices.

According to Signal, “Forcing all UK residents to prove their age and/or have all their content scanned, simply to exercise their fundamental right to communicate, is a perilous proposition.”

The company also warned that once such capabilities exist, they rarely remain limited to their original purpose. Signal stated: “We know that mass surveillance and censorship capabilities, however sincere-sounding the promises of those who initiate them are, never remain narrowly scoped.”

The Debate Around Client-Side Scanning

At the centre of the controversy is a technology known as client-side scanning.

Unlike traditional content monitoring, which takes place on external servers, client-side scanning operates directly on the user’s device. Supporters argue this provides a compromise between privacy and safety because images do not need to be sent elsewhere for inspection.

Advocates say the approach can prevent harmful content from being created, viewed, or shared while keeping personal information on the device itself.

Critics, however, argue that the distinction is not as clear-cut as it appears.

Although images may never leave the device, the device is still examining content on behalf of a third party. Privacy groups have long argued that this changes the fundamental trust relationship between users and their devices.

Signal’s concern is that the same scanning infrastructure could potentially be expanded in future to identify other forms of content beyond child protection material. Whether or not such powers were ever used, critics argue that the capability itself creates new risks around surveillance, censorship, security vulnerabilities, and public trust.

A Wider Privacy Battle

The disagreement reflects a much broader debate that has been developing for years.

Previous UK legislation, including the Investigatory Powers Act and aspects of the Online Safety Act, has generated similar disputes between governments seeking stronger online protections and privacy advocates concerned about the long-term consequences of expanding monitoring powers.

Technology companies have also faced these questions before. Apple, for example, previously proposed a system for detecting child sexual abuse material on devices before ultimately abandoning the project following widespread criticism from privacy and security experts.

Supporters of the government’s latest proposals argue that child protection must take priority. Organisations including the NSPCC, Internet Watch Foundation, Barnardo’s, and the Children’s Commissioner for England have publicly welcomed the plans.

NSPCC chief executive Chris Sherwood described the proposal as “a major step forward in our fight against online child sexual abuse.”

What Does This Mean For Your Business?

The wider significance of this dispute isn’t really about nude image detection. It is about where governments, technology companies, and citizens draw the line between child protection and personal privacy, particularly when proposals involve technology capable of examining content directly on people’s devices.

The debate also highlights a growing tension that businesses are increasingly encountering across cyber security, compliance, artificial intelligence, and digital regulation. Governments are seeking stronger protections against genuine harms, while technology providers and privacy advocates are warning about the unintended consequences of expanding monitoring capabilities.

The larger issue here is not simply whether children should be protected online, as few would disagree with that objective. The real debate is whether it is possible to achieve those protections without creating technologies that examine private content on personal devices. As governments around the world continue to grapple with that question, the outcome is likely to influence the future of privacy, encryption, and digital communications far beyond the UK.

The post Featured Article : Signal Warns UK Device Scanning Plan ‘Endangers Us All’ appeared first on Mear Technology.

What The Workers Reported Seeing

The controversy began in February when workers employed by Sama in Nairobi told Swedish newspapers that their role involved reviewing and labelling video footage captured by Meta’s Ray-Ban smart glasses. According to those accounts, the material included deeply private scenes, with one worker stating, “We see everything – from living rooms to naked bodies.”

The footage was reportedly not limited to staged or deliberately shared content. Instead, it reflected everyday life captured by wearable cameras, including people undressing, using the toilet, and handling sensitive personal information. The workers’ role was to annotate this material so that Meta’s AI systems could learn to interpret visual and contextual data more effectively.

Meta acknowledged that human review forms part of its AI training process, stating that “photos and videos are private to users” and that human reviewers are used to “improve product performance” with user consent. However, the scale and nature of the material described by workers has intensified scrutiny over how that consent is obtained and understood in practice.

Why Did Meta End The Contract?

Less than two months after the investigation was published, Meta moved to end its relationship with Sama, a US-based outsourcing company that provides data annotation services, employing workers to review and label images and video to train AI systems, a decision that resulted in redundancy notices being issued to 1,108 workers with just days’ notice. The company’s official explanation was that Sama “did not meet our standards,” although it did not specify which standards had been breached or when concerns were first identified.

Disputed By Sama

Sama has strongly disputed that characterisation, stating that it had “consistently met the operational, security and quality standards required” and had not been informed of any shortcomings before the contract was terminated.

The timing of the decision has led to further questions, with labour groups and campaigners arguing that the termination may have been linked to the workers speaking out rather than performance issues, while Naftali Wambalo of the Africa Tech Workers Movement suggested that the standards in question may relate less to quality and more to confidentiality, describing them as “standards of secrecy,” a claim that Meta has not publicly addressed.

The Human Layer Behind AI

The episode highlights a reality that is often overlooked in discussions about artificial intelligence. Before AI systems can recognise images, understand context, or respond to real-world inputs, large volumes of data must be manually labelled by human workers.

In this case, that process meant individuals in Kenya reviewing unfiltered footage captured by wearable devices used by people in entirely different parts of the world. The work sits at the intersection of privacy, labour rights, and technology development, with those carrying out the task often having limited visibility, protection, or influence over how the data is used.

Not The First Time For Meta

It seems this is not the first time Meta’s relationship with outsourced labour has come under scrutiny. For example, previous contracts involving content moderation have been linked to claims of psychological harm, low pay, and inadequate support, with some former workers reporting symptoms consistent with post-traumatic stress. Sama itself exited parts of that work in recent years, acknowledging the challenges involved.

Regulatory Pressure

The revelations have prompted regulatory attention in multiple jurisdictions. For example, the UK’s Information Commissioner’s Office described the reports as “concerning” and requested further information from Meta, while Kenya’s data protection authority has launched its own investigation into the handling of the footage.

Legal challenges are also emerging. A class action lawsuit in the United States alleges that Meta misrepresented the privacy protections of its smart glasses, while privacy groups in Europe continue to question how user data is processed and whether consent mechanisms meet regulatory standards.

The concern centres on a key distinction, because while Meta’s policies may disclose that data can be used to train AI systems, the extent to which users understand that their footage could be viewed by human reviewers remains unclear, particularly when that footage includes sensitive or intimate situations.

What This Means For AI Development

The decision to end the Sama contract does not remove the need for human input in AI systems. Instead, it exposes the tension between rapid technological development and the practical realities of how that development is supported.

Training AI models at scale requires vast amounts of labelled data, and that requirement does not disappear as systems become more advanced. What changes is the level of scrutiny applied to how that data is collected, processed, and reviewed, particularly when it involves real-world human behaviour rather than curated datasets.

Smart glasses themselves represent a significant step forward in AI-enabled consumer devices, combining real-time image capture with on-device and cloud-based processing. However, their effectiveness depends on continuous learning, which in turn depends on the availability of human-labelled data.

What Does This Mean For Your Business?

This story illustrates how organisations adopting AI tools may need to look beyond the technology itself and consider the full data lifecycle, including how training data is sourced, handled, and reviewed, particularly where external providers or offshore teams are involved.

For UK businesses, this has clear implications around compliance and accountability, because under UK GDPR and data protection law, responsibility does not disappear when data is passed to a third party, meaning organisations must be confident not only in how systems perform but also in how the underlying data is being processed and by whom.

Reducing risk therefore means ensuring that suppliers and partners meet clear standards not only for technical performance but also for data governance, worker welfare, and transparency, with strong contractual controls, regular audits, and clear oversight of third-party processes becoming essential, especially when sensitive or personal data is involved.

The broader lesson, and what may be surprising to many, is that AI systems are not purely automated but are built on human input at multiple stages, and any weakness in that chain can create reputational, legal, and ethical risk, leaving businesses that properly understand and manage that reality far better placed to use AI responsibly while maintaining trust with customers, regulators, and stakeholders.

The post Featured Article : Meta Smart Glasses Security Controversy appeared first on Mear Technology.

What Is ‘World’ And How Does It Work?

World, developed by Tools for Humanity, the company co-founded by OpenAI’s Sam Altman, is a digital identity system designed to prove that someone is a real, unique human online without requiring them to share personal information such as their name or identity documents.

The system is built around what the company calls “proof of human”, a way of confirming that a real person, rather than an AI system or automated bot, is behind an online account or interaction. As the company explains, “World ID lets you verify real humans without compromising privacy,” positioning the technology as a privacy-first alternative to traditional identity checks.

Uses The Orb

The system centres around a biometric verification process using a device known as the Orb, which scans a user’s iris and converts it into a unique cryptographic identifier. That identifier becomes the user’s World ID, which can then be used across multiple platforms.

The company says that this approach is designed to protect user anonymity. According to its own materials, “the Orb captures and processes photos to verify uniqueness without the need to retain your images or collect any other information,” with encrypted data stored locally and under user control.

This model reflects a change in how identity is being handled online. For example, instead of repeatedly sharing personal details with different services, with this type of system, users can prove they are a real person once and then reuse that verification across multiple environments.

To support different use cases, World has also introduced multiple levels of verification, ranging from high-security Orb scans to lower-friction methods such as document checks or selfies. This allows platforms to choose the level of assurance that matches their risk profile.

Why World Is Expanding Beyond Its Own Platform

With that foundation in place, World is now moving to scale its technology by integrating directly into high-traffic consumer and business platforms where trust has become a growing issue.

At the same time, the problem it is trying to solve is becoming more urgent. As generative AI systems improve, the volume of synthetic content online is rising sharply, making it harder for users and organisations to know whether they are interacting with a real person or an automated system.

As Sam Altman explained at a recent event, “we are also heading to a world now where there’s going to be more stuff generated by AI than by humans.” That shift is already affecting areas such as online dating, customer interactions, and business communications, where authenticity has direct financial and reputational consequences.

Why Platforms Like Tinder And Zoom Are Getting Involved With World

The choice of partners highlights where these pressures are already being felt most strongly. For example, on platforms like Tinder, the challenge is driven by bots and romance scams, which are becoming more convincing as AI-generated profiles and conversations improve.

By integrating World ID, Tinder can offer users a visible signal that a profile belongs to a verified human, helping to rebuild trust in an environment where uncertainty has become common.

In business environments, the risks are more direct and potentially more costly. World’s partnership with Zoom reflects growing concern about deepfake impersonation, particularly in video calls where financial or operational decisions are being made.

Cases involving AI-generated participants in meetings have already resulted in significant financial losses, highlighting the limitations of traditional security measures. World’s approach, which links a live video feed to a previously verified identity, is designed to address this by confirming that the person on screen is genuine.

Beyond these examples, World is also expanding into areas such as digital contracts, ticketing, and online commerce. Integrations with platforms like DocuSign aim to ensure that agreements are signed by real people, while partnerships with ticketing providers such as Ticketmaster and Eventbrite are designed to reduce bot-driven purchasing and reselling.

What This Means For The Future Of Online Trust

The wider significance of these partnerships lies in how they reshape the idea of identity on the internet. Rather than relying solely on usernames, passwords, or document-based verification, platforms are beginning to adopt a model based on proving that a user is a real, unique human.

World’s own positioning reflects this change. The company says its technology can “securely and anonymously prove that every user is a real and unique human online,” while also helping to “eliminate bots and Sybil attacks at scale,” strengthening platform integrity.

This approach has some clear advantages. For example, using this type of verification system, platforms can reduce fake accounts, improve moderation, and create more reliable user experiences, while businesses can lower the risk of fraud and build greater trust with customers and partners.

Biometrics Still A Sensitive Issue

However, there are still many questions around the sensitive issue of the use of biometric verification. In fact, World has already faced scrutiny from regulators in multiple countries over how its technology is deployed, while practical considerations around accessibility persist given that the highest level of verification still depends on specialised hardware.

At the same time, the model highlights a wider challenge, as the rapid development of AI is increasing the need to verify real people while also making impersonation more realistic and easier to carry out at scale.

What Does This Mean For Your Business?

For most organisations, World’s technology will not be something they implement directly in the immediate term, but the change it represents is already relevant.

As AI-driven fraud, impersonation, and automation continue to increase, the ability to verify that a user is genuinely human is likely to become a standard requirement across many digital services. This applies not only to customer-facing platforms but also to internal systems, supply chains, and remote collaboration tools.

A reusable, privacy-focused identity layer has the potential to simplify how organisations manage trust, reducing reliance on fragmented verification methods and lowering exposure to risks such as fake accounts and social engineering attacks.

At the same time, adopting these approaches will require some careful consideration of compliance, user experience, and operational fit. Organisations will need to assess where human verification adds value and how it aligns with their existing systems and processes.

World’s expanding network of partnerships, such as Tinder, shows that this model is already moving into mainstream use. As platforms begin to embed proof-of-human verification into their core functionality, organisations that understand how it works and where it can be applied will be better positioned to operate in a digital environment where proving you are human may become just as important as proving who you are.

The post Featured Article : Altman’s Biometric-Checker In Popular Platforms appeared first on Mear Technology.

What Happened At Booking.com?

Booking.com has confirmed that unauthorised third parties accessed customer reservation data, including names, email addresses, phone numbers, home addresses, and details of past and upcoming bookings.

The company says financial information was not taken from its systems, but it seems that the data that has been exposed is highly sensitive in a different way and could be giving criminals the exact context they need to convincingly impersonate legitimate hotel communications.

For example, customers have already reported receiving suspicious messages, and the platform has begun notifying affected users (by email) while updating reservation PINs as a containment measure. The overall scale of the breach has not yet been fully disclosed.

How The Booking.com Data Breach Appears To Have Happened

Early analysis seems to point to a familiar weak spot rather than a direct breach of Booking.com’s core systems.

Research highlighted by Microsoft suggests attackers targeted hotel partners using phishing techniques designed to trick staff into installing malware, with one method known as “ClickFix” disguising malicious downloads as routine system fixes, often delivered via fake CAPTCHA pages.

Once hotel systems are compromised, attackers can gain access to booking platforms and extract customer data at scale, which aligns with recent reporting about the incident from Malwarebytes, indicating the breach likely originated through third-party access rather than a single central failure.

This matters as it reflects a structural issue rather than a one-off vulnerability, highlighting how interconnected systems can introduce risk beyond the primary platform itself.

What Makes Reservation Hijacking So Effective?

Cybersecurity experts have labelled the resulting scams “reservation hijacking”. In a typical attack of this kind, criminals contact a customer posing as their hotel, referencing genuine booking details such as dates, property names, and contact information, and then claim there is an issue with the booking that requires payment verification or an urgent transfer.

This level of detail removes many of the usual warning signs associated with phishing, as the communication feels routine, relevant, and timed to coincide with an upcoming stay.

As a result, victims are far more likely to comply, especially when the request appears consistent with what they expect from a legitimate provider.

According to data from the UK’s Action Fraud, hundreds of Booking.com-related scams have already been reported in recent years, with significant financial losses, and the concern now is that this breach will increase both the scale and success rate of these attacks.

A Pattern In The Travel Sector

Sadly, this incident is not happening in isolation. For example, travel platforms operate within complex ecosystems involving hotels, franchises, agents, and third-party service providers, and each connection introduces another potential entry point for attackers.

Recent breaches affecting airlines, rail services, and car hire firms all seem to have followed a similar pattern, with attackers gaining access through partners rather than the primary platform itself.

UK consumer group Which? has previously raised concerns about weak verification processes and the misuse of messaging systems within booking platforms, highlighting how easily fraudulent listings and communications can appear legitimate.

The result is an environment where trust is high but control is fragmented, making it easier for attackers to exploit gaps between systems and organisations.

What Has Booking.com Said About The Incident?

Booking.com has said it identified “suspicious activity” affecting a number of reservations and acted quickly to contain the issue, including updating reservation PINs and contacting affected customers directly.

The company has confirmed that unauthorised third parties were able to access certain booking information, but maintains that financial details were not exposed through its systems.

It has also stressed that it will never ask customers to share credit card details by email, phone, WhatsApp or text, or request payments outside the terms set out in the original booking confirmation.

While Booking.com has not disclosed how many customers have been affected or which regions are involved, it has urged users to remain vigilant and report any suspicious messages or payment requests.

Why This Breach Matters More Than It Looks

At first glance, the absence of stolen payment data may seem reassuring, but in reality this type of breach can be just as damaging.

Modern fraud relies less on stealing card numbers and more on manipulating behaviour, and when attackers know where someone is staying, when they are travelling, and how to contact them, they can craft messages that feel entirely credible.

The speed of exploitation is also notable, with reports suggesting phishing attempts began emerging within days of the breach being identified, indicating a coordinated effort to turn stolen data into immediate financial gain.

This effectively moves the incident from a passive data exposure to an active fraud campaign.

What Does This Mean For Your Business?

For organisations that store customer data or rely on third-party platforms, the incident highlights how exposure now extends well beyond internal systems.

Weaknesses within partner organisations can quickly become shared risks, particularly where access to customer data and operational platforms is interconnected, making supply chain security just as important as internal controls.

For Booking.com, the breach adds to ongoing scrutiny around platform security and fraud prevention, especially given the long-running issues with scams linked to its ecosystem, and increases pressure to strengthen both partner controls and customer protections.

Across the wider travel sector, the incident reinforces a persistent challenge, as platforms depend on large, distributed networks of hotels and service providers, creating multiple entry points for attackers and making consistent security standards difficult to enforce at scale.

For customers, the immediate risk lies in highly targeted phishing attempts that feel genuine, with real booking details being used to create convincing scenarios, making it far harder to distinguish between legitimate communication and fraud.

This also highlights how data that appears relatively low risk in isolation can become far more valuable when combined, particularly when it enables attackers to construct believable, real-world narratives that bypass normal scepticism.

In response, there is a growing expectation that platforms will take a more active role in protecting users, whether through stronger partner authentication requirements, improved monitoring of messaging systems, or clearer safeguards around how and when payments should be made.

At the same time, customers are being urged to remain cautious, particularly when asked to make payments or share sensitive information, even if the request appears to come from a known provider or references a genuine booking.

The Booking.com breach demonstrates how quickly stolen data can be turned into targeted, real-world attacks when it is rich in context, reinforcing a broader point for businesses that security is no longer just about protecting systems, but about understanding how data could be used against the people who trust them with it.

The post Featured Article : Booking.com Breach Highlights Rise In Reservation Hijack Scams appeared first on Mear Technology.

What Is ‘Q-Day’?

Q-Day refers to the point at which a quantum computer becomes powerful enough to break widely used cryptographic systems such as RSA and elliptic curve encryption, which underpin everything from online banking to software updates.

Google’s position is that this is no longer a theoretical concern for the distant future. As the company warned in its earlier guidance, “the encryption currently used to keep your information confidential and secure could easily be broken by a large-scale quantum computer in coming years.”

The Risk Is Already Emerging

Attackers are also believed to be collecting encrypted data today with the intention of decrypting it later once quantum capabilities become available, a tactic often referred to as ‘store now, decrypt later’.

Google Revises Its Timeline

In a recent update, Google has set out a more urgent timeline for the transition to post-quantum cryptography, signalling that the industry may have less time than previously expected to prepare for this moment.

The company has now introduced a 2029 target for completing its migration to quantum-resistant cryptography, bringing forward urgency compared to earlier industry expectations that placed large-scale quantum threats in the mid-2030s, and stating: “We’re setting a timeline for post-quantum cryptography migration to 2029.”

Not A Direct Prediction

It’s worth noting here that this isn’t a direct prediction from Google of when exactly quantum computers will most likely break encryption, but it provides some guidance and a reassessment of how quickly organisations need to act.

Why The Updated Timeline?

Google said the change is based on recent progress in “quantum computing hardware development, quantum error correction, and quantum factoring resource estimates”.

In simple terms, it seems the technical barriers that once made quantum threats feel distant are being reduced faster than expected.

Google’s update of Q-Day is not simply about setting a date, it is about creating urgency. The company has made this explicit in a recent blog post about the update, stating: “As a pioneer in both quantum and PQC, it’s our responsibility to lead by example and share an ambitious timeline.” It added that the goal is to “provide the clarity and urgency needed to accelerate digital transitions not only for Google, but also across the industry.”

This reflects a broader concern that organisations are underestimating the scale and complexity of the transition required.

This urgency also reflects the scale of what organisations are being asked to do. For example, moving from current cryptographic standards to post-quantum alternatives is not a simple upgrade. It involves identifying where encryption is used, replacing algorithms across systems, updating infrastructure, and ensuring compatibility across supply chains and partners.

The UK’s National Cyber Security Centre has already described this transition as a “complex change programme”, highlighting the scale of the task facing organisations.

The Gap Between Awareness And Readiness

Despite growing awareness of quantum risks, most organisations are not ready.

Part of the challenge is that the threat itself is difficult to fully understand. Quantum computers are often described as vastly more powerful than today’s systems, and for many businesses, this means the practical implications are unclear. Understanding how and when these machines could break existing encryption, and what that means for real-world systems, is not straightforward without some specialist knowledge.

Research cited in industry reports suggests that while a majority of businesses expect quantum-enabled attacks within the next five years, only a small proportion have a clear roadmap in place to address them.

This means that while many organisations accept that quantum threats are coming, there is still uncertainty about how serious those risks are, when they are likely to materialise, and what practical steps should be taken. That uncertainty can easily lead to delays or a tendency to wait for clearer standards and tools rather than acting early.

Google’s revised timeline challenges that assumption by bringing forward its own migration target and signalling that waiting may not be a viable strategy.

What Google Is Already Doing To Help

Alongside announcing its timeline update, Google says it is actively deploying post-quantum cryptography across its own platforms.

The company has highlighted how Android 17 will integrate PQC digital signature protection using ML-DSA, aligned with standards from the National Institute of Standards and Technology.

This is part of a broader effort to build what Google describes as a “new, quantum-resistant chain of trust”, ensuring that systems remain secure even as computing capabilities evolve.

Google says it has also been working on PQC for several years, including deploying quantum-resistant key exchange mechanisms in Chrome and internal systems, and contributing to global standards development, all of which points to the fact that the transition is not only necessary, but already underway.

Why This Matters

The implications extend far beyond large technology providers. For example, encryption underpins core business functions, from securing customer data and financial transactions to protecting intellectual property and ensuring the integrity of software and communications.

If current cryptographic systems become vulnerable, the impact will not be limited to future systems. Data encrypted today could still be exposed years later if it is harvested and stored by attackers now.

That means the risk is already present, even if the technology required to exploit it fully is not yet available.

What Does This Mean For Your Business?

For most organisations, the key issue here is not whether quantum computing will affect them, but how prepared they are for the transition it will require.

Google’s updated timeline suggests that preparation needs to begin sooner rather than later, particularly for systems that rely on long-lived data or digital signatures that must remain secure for many years.

This will involve building what is often referred to as crypto agility, the ability to update cryptographic algorithms without disrupting services, as well as developing a clear inventory of where and how encryption is used across the organisation. In practical terms, that means identifying where sensitive data is stored, how it is protected in transit and at rest, and which systems rely on public key cryptography that may need to be replaced.

It also means starting to assess whether existing platforms, applications and suppliers are capable of supporting post-quantum cryptography, and whether updates, migrations or architectural changes will be required. Some organisations are already beginning to test quantum-resistant algorithms in non-critical systems to understand performance, compatibility and operational impact before wider rollout.

Engagement with suppliers and partners will also be important, as cryptographic systems rarely operate in isolation and weaknesses in third-party systems can undermine otherwise secure environments.

Taken together, Google’s update suggests that the window for treating quantum security as a future concern is narrowing, and that organisations that begin mapping, testing and planning now will be in a far stronger position than those that wait.

The post Featured Article : Google Brings ‘Q-Day’ Closer With 2029 Encryption Warning appeared first on Mear Technology.

Amendment Backed

By 261 votes to 150, peers backed a cross-party amendment to the Children’s Wellbeing and Schools Bill that would require platforms to deploy “highly effective” age checks within a year, marking a rare but not unusual legislative defeat for ministers in the Lords and setting up a politically sensitive return to the Commons.

Who Is Pushing for a Ban and Why?

Support for an under-16 social media ban cuts across party lines at Westminster and is being driven by concern that existing rules are not doing enough to limit children’s exposure to online harms. The amendment in the Lords was sponsored by Conservative former schools minister Lord Nash and backed by Conservative, Liberal Democrat and crossbench peers, along with a small number from Labour. Those in favour argue that a clear national age limit would give parents and schools stronger backing when setting boundaries, while placing the responsibility for enforcement squarely on social media companies rather than families.

In The Commons Too

Momentum has also grown in the Commons. For example, more than 60 Labour MPs have publicly urged ministers to act, while the issue has been raised repeatedly at Prime Minister’s Questions. Outside Westminster, bereaved families and online safety advocates have called for decisive action, citing concerns around mental health, exposure to harmful content and compulsive use. At the same time, children’s charities and civil liberties groups have warned that a blanket ban could create unintended consequences, including displacement to less regulated services and wider use of intrusive age verification.

Australia’s Move and Why It Changed the UK Debate

It seems that UK political interest on this subject intensified after Australia introduced a minimum-age framework in late 2025. Rather than criminalising children’s use, Australia placed the onus on platforms to take “reasonable steps” to prevent under-16s from holding accounts on age-restricted social media services, with enforcement beginning in December 2025.

The Australian model matters because it focuses on accounts rather than total access. For example, under guidance from the Australian Department of Infrastructure and the eSafety Commissioner, under-16s are not penalised for attempting to use services; platforms face compliance action if they fail to implement safeguards. The framework also includes privacy protections around age assurance data and allows some logged-out access, limiting the scope of checks to user accounts.

Australia’s model has become a key reference in the UK debate, cited by ministers and peers as evidence that age-based restrictions could be enforced without universal identity checks. For example, supporters highlight its focus on blocking account creation rather than access itself, while critics argue the policy is too recent to show whether it delivers lasting reductions in harm.

Why the Lords Backed the Amendment

It seems the Lords’ vote reflected frustration with the pace of change and a belief that existing powers are not delivering fast enough. Supporters argued that the Children’s Wellbeing and Schools Bill provided a practical vehicle to force action within a defined timeframe, rather than leaving the issue to future legislation.

During the debate, Lord Nash (Conservative) described teenage social media use as a “societal catastrophe”, arguing that delaying access would give adolescents “a few more years to mature”. Other peers pointed to rising demand for child and adolescent mental health services and disruption in classrooms, while accepting that social media also offers benefits.

However, opponents in the chamber urged caution. For example, Labour peer Lord Knight warned that a blanket ban could push young people towards “less regulated platforms” and deprive them of positive connections, calling instead for young people’s voices to be heard through consultation.

What the Amendment Actually Requires

The amendment does not list specific apps. Instead, it uses the Online Safety Act’s category of “regulated user-to-user services” and sets out a process whereby, within 12 months of the Act passing, ministers would be required to:

Direct the UK Chief Medical Officers to publish advice for parents on children’s social media use at different ages and stages of development.

Introduce regulations mandating “highly effective age assurance” to prevent under-16s from becoming or being users of in-scope platforms.

Crucially, those regulations would be enforceable under the Online Safety Act, bringing them within Ofcom’s existing compliance framework, and would require affirmative approval by both Houses. In practice, that means Parliament would still vote on the detailed rules, including which services fall in scope and what counts as “highly effective”.

How a Ban Could Be Implemented and Enforced

Enforcement would likely focus on preventing account creation by under-16s rather than blocking all content. For example, platforms could be required to use a mix of age-estimation tools, document checks, device signals and repeat prompts, alongside anti-spoofing measures to deter workarounds.

Supporters of the ban argue that reducing exposure, rather than eliminating it entirely, would still lower harm by making social media use less universal among teenagers and easing peer pressure to participate. However, critics say that determined users will continue to find ways around controls, while warning that large-scale age assurance could extend far beyond children, pulling adults into verification systems and normalising online surveillance.

Restricting mainstream platforms also carries a displacement risk, e.g., with some teenagers likely to migrate to smaller or overseas services that operate with weaker moderation and fewer safeguards, potentially complicating child protection rather than improving it.

Why the Government Is Resisting for Now

The government has resisted writing an under-16 social media ban into law for now, opting instead to launch a three-month consultation on children’s online safety that includes the option of a ban alongside measures such as overnight curfews, limits on “doom-scrolling”, tougher enforcement of existing age checks and raising the digital age of consent from 13 to 16.

In a statement to the Commons, Technology Secretary Liz Kendall said the government would “look closely at the experience in Australia” and stressed the need for evidence-led policy. She acknowledged strong views in favour of a ban but warned of risks in different approaches, arguing consultation was the responsible route.

Kendall also emphasised that action is coming regardless, stating: “The question is not whether the government will take further action. We will act robustly.” The resistance, ministers argue, is about timing and design rather than principle.

What It Would Mean for Platforms, Parents and Teenagers

For platforms operating in the UK, a ban would mean heavier compliance costs, tighter onboarding processes and closer scrutiny from regulators. Advertising, influencer marketing and youth-focused features would also face new constraints, while demand for privacy-preserving age assurance services would rise.

For parents, a clear legal line could reduce the burden of negotiating platform rules alone and provide stronger backing for limits at home and in schools. For teenagers, the picture is a bit more mixed. For example, Ofcom research shows most young people report positive experiences online, with many saying social platforms actually help them feel closer to friends. Critics argue that removing access could disproportionately affect isolated or minority groups who rely on online communities.

Business and Policy Implications

Beyond families and platforms, the amendment highlights a broader policy shift. For example, treating social media access more like other age-restricted products would move the UK closer to a regulated-by-default model, with implications for digital identity, privacy and compliance across sectors.

Businesses that rely on youth audiences would need to adjust strategies, while regulators would face pressure to ensure age assurance does not expand unnecessarily. Internationally, the UK’s approach would, no doubt, be watched closely, adding to a growing global debate about how far states should go in reshaping children’s digital lives.

Criticisms Shaping the Commons Fight

As the Bill returns to MPs, the arguments are most likely to focus on scope and consequences rather than intent. For example, critics warn of surveillance creep, imperfect enforcement and the risk of pushing harms elsewhere, whereas supporters say that waiting for perfect solutions still leaves children exposed and that clear age limits would reset expectations.

It’s worth noting here that, with the government’s majority, ministers are pretty likely to overturn the amendment. That said, the Lords’ vote has at least already achieved part of its aim by forcing the issue to the centre of the legislative agenda, ensuring that the consultation’s outcome, and the next steps that follow, will be closely scrutinised.

What Does This Mean For Your Business?

The outcome now hinges on how far ministers are willing to go beyond consultation and whether political pressure in the Commons forces a clearer timetable for change. Even if the Lords amendment is removed, the debate has narrowed the government’s room for manoeuvre by placing an under-16 ban firmly within the range of realistic policy options rather than the margins of discussion. The question has, therefore, now shifted from whether intervention is justified to how prescriptive the state should be, and how quickly any new rules should take effect.

For UK businesses, particularly digital platforms, advertisers and firms operating in regulated online spaces, the policy implications are becoming harder to ignore. Stronger age assurance requirements would bring higher compliance costs and technical complexity, while also creating opportunities for providers of privacy-preserving verification tools and child safety services. More broadly, a move towards age-based restrictions on mainstream platforms would reinforce the UK’s position as a jurisdiction willing to regulate digital products in the same way as other age-sensitive services, with knock-on effects for investment decisions and product design.

For parents, schools and young people, this whole debate reflects a wider tension between protection and participation in digital life. A clear legal threshold could simplify boundary-setting and expectations, yet risks limiting access to the positive aspects of online connection that many teenagers value. How the government balances these competing interests, and whether it opts for a targeted regulatory approach or a clearer statutory ban, will shape not just children’s online experiences but the future direction of UK digital policy more broadly.

The post Featured Article : Lords Back Under-16 Social Media Ban appeared first on Mear Technology.

Background

The controversy centred on X, formerly Twitter, and its AI chatbot Grok, developed by xAI. In early January, multiple reports and user complaints highlighted that the Grok account on X had been used to generate and share digitally altered images of real people, including women being undressed or placed into sexualised scenarios without their consent. Some of the reported material involved sexualised images of children, raising concerns that the content could meet the legal definition of child sexual abuse material.

In several cases, individuals said large volumes of sexualised images had been created using the tool, with content spreading rapidly once posted. Campaigners argued that the integration of AI image generation directly into a social platform significantly increased the speed and scale at which this form of abuse could occur.

The issue fed into a wider debate about AI-generated intimate image abuse, sometimes referred to as nudification or deepfake sexual imagery. While the sharing of such material has long been illegal in the UK, ministers argued that generative AI had transformed the threat by lowering the technical barrier to abuse and increasing the likelihood of mass distribution.

The Warning

The political response escalated on Monday 12 January 2026, when UK Prime Minister Keir Starmer addressed Labour MPs at a meeting of the Parliamentary Labour Party. During that meeting, Starmer warned that X could lose the “right to self regulate” if it could not control how Grok was being used. He said: “If X cannot control Grok, we will – and we’ll do it fast, because if you profit from harm and abuse, you lose the right to self regulate.”

The warning came on the same day that Ofcom confirmed it had opened a formal investigation into X under the Online Safety Act, citing serious concerns about the use of Grok to generate illegal content.

On 15 January, Starmer reinforced his position publicly on X. In a post shared from his account, he wrote: “Free speech is not the freedom to violate consent. Young women’s images are not public property, and their safety is not up for debate.”

He added: “I welcome that X is now acting to ensure full compliance with UK law – it must happen immediately. If we need to strengthen existing laws further, we are prepared to do that.”

The timing was deliberate, as the warning coincided with mounting pressure on the government to demonstrate that recently passed online safety laws would be enforced decisively, including against the largest global platforms.

Why Grok Became A Regulatory Flashpoint

Grok’s image generation capability was not unique in the AI market, but its deployment inside a major social platform raised specific risks. For example, because Grok was embedded directly into X’s interface, images could be generated and shared within the same environment. This reduced friction between creation and publication, increasing the likelihood that harmful material could circulate widely before being detected or removed.

Ofcom said it made urgent contact with X on 5 January and required the company to explain what steps it had taken to protect UK users by 9 January. While X responded within that deadline, the regulator concluded that the situation warranted a formal investigation.

Ofcom said there had been “deeply concerning reports” of the Grok account being used to create and share undressed images of people that may amount to intimate image abuse, as well as sexualised images of children that may constitute child sexual abuse material.

What Losing The Right To Self Regulate Would Mean

Losing the right to self regulate would carry serious consequences for X.

Under the Online Safety Act, platforms are expected to assess the risks their services pose and put effective systems in place to prevent users in the UK from encountering illegal content. Ofcom does not moderate individual posts and does not decide what should be taken down.

Instead, its role is to assess whether a platform has taken appropriate and proportionate steps to meet its legal duties, particularly when it comes to protecting children and preventing the spread of priority illegal content.

Starmer’s warning made clear that if X is judged unable or unwilling to manage those risks through its own systems, the government and regulator are prepared to intervene more directly, shifting the balance away from platform-led oversight and towards formal enforcement.

In practical terms, that could mean e.g., Ofcom imposing specific compliance requirements, backed by legal powers, rather than relying on X’s own judgement about what safeguards were sufficient.

For example, under the Act, Ofcom can issue fines of up to £18 million or 10 per cent of qualifying worldwide revenue, whichever is greater. In the most serious cases of ongoing non-compliance, it can apply to the courts for business disruption measures.

These measures can include requiring payment providers or advertisers to withdraw services, or requiring internet service providers to block access to a platform in the UK.

What Is Ofcom’s Investigation Examining?

Ofcom said its investigation would examine whether X had complied with several core duties under the Online Safety Act. For example, these include whether X had adequately assessed the risk of UK users encountering illegal content, whether it had taken appropriate steps to prevent exposure to priority illegal content such as non-consensual intimate images and child sexual abuse material, and whether it had removed illegal content swiftly when it became aware of it.

The regulator is also examining whether X properly assessed risks to children and whether it used “highly effective age assurance” to prevent children from accessing pornographic material.

Suzanne Cater, Ofcom’s Director of Enforcement, said: “Reports of Grok being used to create and share illegal non-consensual intimate images and child sexual abuse material on X have been deeply concerning.”

She added: “Platforms must protect people in the UK from content that’s illegal in the UK, and we won’t hesitate to investigate where we suspect companies are failing in their duties, especially where there’s a risk of harm to children.”

While Ofcom acknowledged changes made by X, it has said the investigation remained ongoing and that it was working “round the clock” to establish what went wrong and how risks were being addressed.

The Response

X and xAI (Elon Musk’s AI company behind Grok) reportedly responded by tightening controls around Grok’s image generation features and publicly setting out their compliance position.

For example, X said it had introduced technical measures to stop the Grok account on the platform from being used to edit images of real people in revealing clothing, including swimwear. These restrictions apply globally and cover both free and paid users.

The company also said it had limited image creation and image editing via the Grok account on X to paid subscribers only, arguing this would improve accountability where the tool is misused.

In addition, X said it would geoblock, in jurisdictions where such material is illegal, the ability to generate images of real people in underwear or similar attire. xAI confirmed it was rolling out comparable geoblocking controls in the standalone Grok app.

Alongside these changes, X was keen to say it has zero tolerance for child sexual exploitation and non-consensual intimate imagery, and that accounts found to be generating or sharing such content would face enforcement action, including permanent suspension.

That said, at the same time, Elon Musk criticised the UK government’s response, suggesting it amounted to an attempt to restrict free expression. UK ministers rejected that characterisation, maintaining that the action was about enforcing criminal law and protecting people from serious harm, not limiting lawful speech.

The Government’s Legal And Policy Response

The regulatory pressure on X was matched by swift legislative action from the UK government. For example, Liz Kendall, the Technology Secretary, told MPs that the Data (Use and Access) Act had already created an offence covering the creation or request of non-consensual intimate images, but that the offence had not yet been brought into force.

She said the offence would be commenced that week and would also be treated as a priority offence under the Online Safety Act. Kendall described AI-generated sexualised images as “weapons of abuse” and said the material circulating on X was illegal.

She also said the government would criminalise the supply of tools designed specifically to create non-consensual intimate images, targeting what she described as the problem “at its source”.

Kendall rejected claims that the response was about limiting lawful speech, saying it was about tackling violence against women and girls.

Wider Implications For Platforms, AI Tools, And Users

It seems this case has become one of the most high-profile tests of the Online Safety Act since its duties came into force. It all means that for X, the risks include financial penalties, enforced changes to how Grok operates in the UK, and long-term reputational damage if the platform is seen as unsafe or slow to respond.

For other platforms and AI providers, the episode is also likely to send a clear signal that generative tools embedded into social systems will be scrutinised under UK law, regardless of where the technology is developed.

For businesses that use X for marketing, customer engagement, or recruitment, the dispute raises questions around brand safety, platform governance, and the risks of operating on a service under active regulatory investigation.

Also, at a regulatory level, the case shows that Ofcom is prepared to pursue major global platforms and to use the full range of powers available under the Online Safety Act where serious harm is alleged.

Challenges And Criticisms

Despite the technical changes and legislative pushback, it seems this episode has exposed a number of unresolved challenges and points of criticism. For example, one of the clearest tensions is between political pressure for rapid enforcement and the need for legally robust regulatory processes. Ministers have urged Ofcom not to allow investigations to drift, while the regulator has repeatedly stressed that it must follow the formal steps set out in the Online Safety Act.

There are also questions about the effectiveness of narrowly targeted technical controls. For example, critics have pointed to Grok’s earlier design choices, including permissive modes that encouraged provocative or boundary-testing outputs, as contributing to misuse. From that perspective, restricting specific prompts or image categories may address symptoms rather than the underlying incentives built into generative AI tools.

Also, age assurance, i.e., methods used to verify whether a user is a child or an adult, remains a significant area of concern. Ofcom has highlighted the need for “highly effective” protections for children, but deploying such systems at scale continues to raise questions around accuracy, privacy, and user trust.

What Does This Mean For Your Business?

The dispute around X and Grok seems to have clarified how far the UK government is prepared to go when online platforms are judged to be falling short of their legal duties, particularly where new AI tools are involved. The warning issued by the Prime Minister was not just rhetorical, and underlined a willingness to move beyond cooperative regulation if a platform cannot demonstrate that it understands and controls the risks created by its own systems.

For UK businesses, the case is a reminder that platform risk is no longer just a reputational issue but also a regulatory one. Organisations that rely on X for marketing, customer engagement, recruitment, or public communication should know that they are now operating on a platform under active regulatory scrutiny. That raises practical questions around brand safety, governance, and contingency planning, especially if enforcement action leads to service restrictions or further operational changes.

Also, the episode sets a precedent for how AI features embedded within digital services are likely to be treated under UK law. Ofcom’s investigation, alongside the government’s decision to accelerate legislation, signals that generative AI will be judged not only on innovation but on real world impact.

For platforms, AI developers, regulators, and users alike, the expectations are now clear. Companies rolling out generative AI tools are expected to build in safeguards from the outset, respond quickly when misuse occurs, and show regulators that risks are being actively managed, not simply acknowledged after the fact.

The post Featured Article: PM Warns X It Could Lose The Right To Self Regulate appeared first on Mear Technology.

Petition

Interestingly, a petition on the UK Government’s site : https://petition.parliament.uk/ had attracted approaching three million signatures of people opposed to the bill, within a week of the announcement being made.

Rolled out by 2029

The Prime Minister has confirmed that a new digital identity scheme will be introduced across the UK by 2029, with every citizen and legal resident required to use a digital ID to prove their right to work.

Mandatory

The new ID will be free and optional for those not seeking employment, but will be compulsory for anyone taking up paid work. The government says it will replace paper documents and National Insurance numbers for right-to-work checks, with full implementation expected before the next general election. The government also says that, by law, this must take place no later than August 2029.

What Form Will It Take?

The government says the digital ID will be a secure, app-based credential stored on people’s mobile phones using the GOV.UK Wallet system. It will include core personal information such as name, date of birth, nationality or residency status, and a photo. The app will act as a proof of identity and legal right to work, with data encrypted and held directly on the user’s device.

The system has been designed to allow users to share only the information needed in each situation, for example, confirming eligibility to work without revealing unrelated personal details. If a phone is lost or stolen, the credential can be revoked remotely and reissued.

The government says this will replace the need to provide paper copies of documents such as passports or residence permits, and will become the standard method of proving work eligibility across the UK labour market.

Why?

The government says the scheme is designed to reduce illegal working, deter unauthorised migration, and improve the consistency of identity checks. Ministers argue that illegal employment remains a key draw for people entering the UK without permission, and that a digital system will make enforcement more effective.

The new ID is also framed as a broader tool for improving access to public services. It is hoped that over time, it could be used to simplify applications for childcare, benefits, driving licences, and tax records, although these uses will be optional, not mandatory.

In a statement issued through Downing Street, Prime Minister Keir Starmer said: “Digital ID is an enormous opportunity for the UK. It will make it tougher to work illegally in this country, making our borders more secure.”

However, some opponents believe the move is motivated more by political positioning than practical enforcement. For example, with pressure mounting over small boat crossings and immigration policy, privacy campaigners argue that the scheme could have been designed primarily to reassure voters rather than address the root causes of illegal working.

Previous attempts

It should be noted here that this is not the first time a UK government has proposed a national identity scheme. Back in the early 2000s, then-Prime Minister Tony Blair introduced plans for a physical ID card, which became law in 2006. The cards were intended to help combat terrorism, immigration abuse, and benefit fraud, and were linked to a central National Identity Register.

However, the scheme faced widespread opposition on civil liberties grounds and was criticised for being expensive, intrusive, and ineffective. In 2010, the incoming Conservative-Liberal Democrat coalition government scrapped the programme and destroyed the database. At the time, the Home Secretary called it a “high-cost, high-risk” scheme that offered little public benefit.

Although the new digital ID plan differs in format, with no central identity register and no requirement to carry or show ID in public, it seems that many of the same concerns about privacy and state overreach have re-emerged.

Encrypted

Although the digital ID will be held on a person’s phone in the form of a secure app-based wallet, similar to the NHS app or mobile payment cards, it will use encrypted, on-device storage so that if a phone is lost, the credential can be immediately revoked and reissued.

For Working Legally

Current right-to-work rules already require employers to check and retain copies of identity documents, such as passports or biometric residence permits, or to use the Home Office online service. Civil penalties for non-compliance can be up to £60,000 per illegal worker for repeat offences.

Ministers say the new digital ID will therefore reduce the risk of fraud, speed up hiring, and close off loopholes that currently allow the use of borrowed or forged documents. It is also intended to help enforcement agencies identify patterns of non-compliance across the labour market, including in casual and gig economy roles.

According to the Cabinet Office, “a new streamlined digital system to check right to work will simplify the process, drive up compliance, crack down on forged documents and create intelligence data on businesses.”

Border Security

The policy has also been presented by the Prime Minister as a key part of the government’s approach to tackling illegal migration (which has been much in the news lately). In a statement issued through Downing Street, he said: “Digital ID is an enormous opportunity for the UK. It will make it tougher to work illegally in this country, making our borders more secure.”

He added: “We are doing the hard graft to deliver a fairer Britain for those who want to see change, not division. That is at the heart of our Plan for Change.”

Ministers argue that access to informal work is a major incentive for people entering the country without permission. By requiring all legal workers to use digital ID, the government hopes to reduce the so-called “pull factor” of illegal employment.

What Is (And Isn’t) Required

The government says the digital ID will be required only for those seeking paid employment. There are no plans to require it for everyday activities such as accessing healthcare or public spaces, and people will not be expected to carry proof of identity at all times. For example, the government materials explicitly state that “there will be no requirement for individuals to carry their ID or be asked to produce it” outside of employment-related checks.

However, the digital ID is expected to become increasingly useful for other tasks, such as accessing childcare, welfare, or tax records. It’s understood these uses will be optional, with ministers presenting them as convenience features rather than legal requirements.

Access And Inclusion

While the system is designed primarily for smartphone use, ministers have also confirmed that physical alternatives will be made available for people who are digitally excluded. This may include older people, those experiencing homelessness, or individuals without regular access to internet-connected devices.

Consultation Planned

A formal public consultation will launch later this year, seeking input on how to design the system inclusively. The government says this will include engagement with charities and local authorities, as well as face-to-face outreach and support services.

The Cabinet Office says the aim is to create “a service that takes the best aspects of the digital identification systems that are already up and running around the world,” while ensuring it “works for those who aren’t able to use a smartphone.”

Used In Other Countries

Some other countries already have working digital ID schemes. Examples of these that the UK’s digital ID model draws on include Estonia, Denmark, Australia, and India. For example:

– In Estonia, citizens use a mandatory digital ID for voting, healthcare, banking, and education, supported by strong encryption and decentralised systems.

– In Denmark, a MitID credential is used for logging into government and banking services, though it is not compulsory for all citizens.

– Australia’s national Digital ID system allows residents to access public services through apps like myGov, with varying levels of identity strength depending on the use case.

– In India, the Aadhaar system assigns a unique biometric ID number to over a billion people, primarily to streamline welfare and reduce fraud.

Ministers say the UK version will focus on privacy by design, with data stored locally on the user’s device and shared selectively.

Public Reaction And Political Response

The announcement has triggered a divided response across the political spectrum. Supporters argue it will modernise outdated systems and improve national security, while opponents say it risks overreach and mission creep.

More than one million people have already signed a Parliamentary petition opposing the introduction of digital ID, with civil liberties groups warning of long-term consequences for personal freedom. For example, Big Brother Watch, a UK-based privacy campaign group, said: “Plans for a mandatory digital ID would make us all reliant on a digital pass to go about our daily lives, turning us into a checkpoint society that is wholly un-British.”

Also, Liberty, the human rights organisation, expressed concern, stating that the proposals raise “huge concerns about mass surveillance” and could increase barriers for vulnerable people trying to access work or support.

Opposition politicians have also criticised both the scale of the scheme and the lack of debate. For example, Conservative leader Kemi Badenoch has questioned the cost, saying the government should focus on better enforcement of existing laws. The SNP and Northern Ireland’s First Minister have also raised concerns about the implications for devolved powers and the rights of Irish citizens.

Employers And Service Providers

Businesses will need to adjust their onboarding and compliance processes once the new system is in place. The government says it will issue new guidance and offer integration options, but employers may face practical questions around adoption timelines, system compatibility, and staff training.

The Home Office is expected to update its employer toolkits and codes of practice during the rollout. Officials have said the changes will reduce red tape in the long term but acknowledge that transitional support may be needed.

There is no requirement yet for employers to take any action, but the digital ID scheme is likely to become the default verification method once legislation is passed. The Department for Science, Innovation and Technology has said it is working with industry groups and software providers to ensure compatibility and reduce disruption.

Security And Safeguards

In terms of security and privacy, according to the Cabinet Office, the digital ID will use “state-of-the-art encryption and user authentication to ensure data is held and accessed securely.” The information will remain under the control of the user, stored on their device and not in a centralised database.

The government says the system is designed to limit personal data sharing, with users able to present only the specific information required for a given situation. For example, an employer might only see proof of work eligibility without accessing unrelated personal details.

If a device is lost or compromised, the credential can be cancelled and reissued. The government says this offers better protection than paper-based documents, which are easier to forge or misuse.

Challenges And Unanswered Questions

Despite assurances around data security and voluntary usage beyond employment, it must be said that there remain some unresolved concerns about the scope and risks of the new digital ID system. For example:

– Inclusion will require careful planning and proper resourcing to ensure fair access for people without smartphones, stable housing, or standard documents.

– Privacy and data safety remain a concern, with campaigners warning that even encrypted systems are not immune to hacking or misuse.

– Cost and complexity are still unclear, as the government has not yet published a full estimate of programme costs or explained how the rollout will be phased.

– Public trust will be critical, especially given the level of opposition from civil liberties groups and the wider concerns already raised across Parliament.

What Does This Mean For Your Business?

If delivered effectively, it’s possible to see how a digital ID scheme could bring some long-term operational benefits to UK businesses, i.e. by reducing the administrative burden of right-to-work checks and making fraud harder to commit. A single, standardised credential could simplify hiring, especially in sectors where temporary or remote onboarding is common. Employers, however, will want clear timelines, technical support, and assurance that they won’t be exposed to new liabilities during the transition.

Public reaction to the scheme is likely to remain mixed. While those in work will be legally required to adopt the new system, others may choose to use it to access public services more easily. The success of the rollout will depend heavily on how well the government delivers inclusive access for people who do not have smartphones or consistent digital connectivity. Ministers have promised support and consultation, but this remains a key point of scrutiny.

However, it’s clear already that the wider political and civil liberties questions are unlikely to go away. Campaigners continue to warn of surveillance risks and creeping functionality, especially if the ID becomes more widely used in everyday life over time. The comparison with previous ID card proposals is unavoidable. Although this version is digital-only, decentralised, and limited in scope, it revives long-standing concerns about privacy and state control.

As with other large digital infrastructure programmes, the practical outcomes will depend on delivery, not just design. That includes building trust, preventing mission creep, and ensuring the system works reliably in the real world. For now, businesses and citizens alike will be watching closely as the consultation opens and the legislation begins its passage through Parliament.

The post Featured Article : Mandatory UK Digital ID Mandatory By 2029 appeared first on Mear Technology.

Using Algorithms

The disclosure came after recent reports in The Telegraph revealed HMRC was using algorithms to flag suspicious activity online. In response, the tax authority confirmed that AI is already playing a role in its investigative work. Officials stressed the technology is only used in criminal investigations and is not applied to the everyday taxpayer. In a statement, HMRC said AI is being deployed to help staff spot inconsistencies between declared income and publicly available social media posts, while also cutting down the amount of time spent on manual administration.

Spend Less Time on Admin

“Greater use of AI will enable our staff to spend less time on admin and more time helping taxpayers, as well as better target fraud and evasion to bring in more money for public services,” HMRC said in a statement. Officials added that the approach does not replace human decision-making, pointing to what they describe as “robust safeguards and legal oversight” around the process.

Why AI Is Being Deployed

The move reflects HMRC’s broader challenge of narrowing the UK’s tax gap, which in 2022–23 was estimated at £51 billion, or about 4.8 per cent of total theoretical tax liabilities. Of this, around £5.5 billion was attributed to tax evasion. Reducing this shortfall has become a priority for the government, which has promised that more efficient enforcement will increase revenues without raising taxes on working households.

By applying AI tools to tasks previously carried out manually, HMRC, therefore hopes to process large volumes of open-source data more quickly and accurately. Social media platforms such as Instagram, Facebook and TikTok are seen as sources of information because they often show details of people’s lifestyles that may not align with their declared income.

For example, cases have previously been reported where individuals claiming benefits on grounds of ill health were found posting publicly about participation in marathons, or where people declaring modest incomes shared photos of luxury cars and holidays. Until now, gathering such evidence relied heavily on human monitoring. AI allows patterns, anomalies and potential red flags to be detected across thousands of accounts in a fraction of the time.

Integration with Existing Systems

It’s hoped that this latest use of AI will complement HMRC’s wider analytical infrastructure, particularly its “Connect” system, introduced more than a decade ago. Connect draws together information from tax returns, banks, property records and other government databases to flag discrepancies between declared income and observed financial behaviour. Adding automated social media analysis into that mix gives investigators another channel through which to identify possible fraud.

Also To Provide Guidance To Taxpayers

It should be noted that the department has also been exploring AI for broader and less sinister purposes, such as helping taxpayers navigate the more than 100,000 pages of guidance on its website, and summarising customer service calls for advisers. However, it’s the use of social media monitoring that has generated the most public debate, not least because of its implications for privacy, accuracy and accountability.

Efficiency Gains and Cost-Cutting For HMRC

For HMRC itself, the adoption of AI in investigations is positioned as an efficiency gain rather than a cost-cutting measure. The government has already announced plans to recruit 5,500 new compliance staff, suggesting the technology will be used to augment rather than replace human expertise.

Tax specialists have noted that AI could help HMRC by pulling together information from multiple sources far more efficiently than manual checks. At the same time, they warn of potential pitfalls, including the risk of mistaken identity if the technology fails to distinguish between genuine accounts and those that are fake or hacked. Such concerns underline the importance of retaining human oversight in any decision-making process.

Focusing

From HMRC’s perspective, the argument is that automation allows investigators to focus their time where it is most valuable, i.e. complex cases that require judgment, rather than sifting through data for initial leads. The department also points to the potential to secure better returns on public spending, with AI-enabled enforcement expected to bring in billions of pounds in additional tax revenues over the coming years.

The Implications for Taxpayers

For law-abiding taxpayers, HMRC has been keen to stress that there is little to fear from AI social media monitoring. Officials say the tools are not used in routine tax collection or compliance checks, but only in serious criminal cases where there is already suspicion of wrongdoing.

The wider deployment of AI across HMRC’s operations could, in time, make interactions with the tax system simpler for the majority. For example, tools that help people understand complex rules, avoid errors in returns and access relevant guidance more quickly could reduce unintentional mistakes. Tax specialists point out that significant amounts of revenue are often lost through basic errors, and AI has the potential to reduce this by offering clearer digital assistance and more reliable support to taxpayers.

Surveillance Fears

At the same time, it has to be said that the disclosure that HMRC is scouring social media using AI may add to public concerns about surveillance and government access to personal data. Although the posts in question are publicly visible, many people may not anticipate that their online activity could form part of a criminal tax investigation.

Challenges

Not surprisingly, the announcement has not gone unchallenged. Privacy advocates and some parliamentarians have warned that reliance on AI risks producing false positives, where innocent individuals are wrongly flagged as suspicious. Concerns have also been raised that the system could amplify errors if it fails to distinguish between genuine accounts and those that are hacked, fake or misleading. Civil liberties group Big Brother Watch has previously cautioned that the spread of AI-driven surveillance represents a “frightening expansion” of state monitoring, and argued that without strict legal safeguards such tools risk undermining privacy and fairness in the justice system.

There is also a wider political backdrop. The UK government is under pressure over its broader AI strategy, with reports earlier this year suggesting the national AI institute faced internal turmoil and potential funding withdrawals. Against that context, the use of AI by HMRC has become part of a larger debate about how far public authorities should adopt emerging technologies, and how safeguards should be applied.

Some commentators have also drawn parallels with the Horizon IT scandal at the Post Office, in which faulty computer evidence led to wrongful prosecutions of sub-postmasters. Although HMRC emphasises that human decision-making remains central to its process, critics argue that overreliance on automated systems without adequate checks could carry significant risks.

The tax authority insists that its approach has been developed with those lessons in mind. AI is used to highlight possible leads, but human investigators must review the evidence before any action is taken. Officials have also stressed that all use of AI in this area is subject to legal oversight, ensuring compliance with UK data protection and criminal justice laws.

Wider International Context

It should be noted, however, that the UK is not alone in deploying AI to tackle tax evasion as other countries have already been using similar methods. HMRC has been sending so-called “nudge letters” to taxpayers after analysing international financial data shared under the OECD’s Common Reporting Standard, which tracks overseas income. This AI-assisted approach has contributed to a reported 22 per cent rise in admissions of foreign tax evasion in recent years.

The logic appears to be that as more financial data becomes digitised and globally shared, AI will become a necessary tool for connecting the dots. For HMRC, adding social media monitoring into that picture is seen as the next step in keeping pace with increasingly complex forms of tax fraud.

What Does This Mean For Your Business?

The real test will be whether HMRC can strike the balance between efficiency and fairness. The technology may promise to sharpen investigations, close the tax gap and support a more resilient tax base, but it also raises unresolved questions about how far government agencies should be able to probe into people’s digital lives. For taxpayers, reassurance that AI will not be used in routine compliance checks will be welcome, but concerns about transparency and proportionality are unlikely to fade quickly.

For UK businesses, the implications may be twofold. For example, firms could benefit from a more level playing field if AI enables HMRC to clamp down more effectively on undeclared income and fraudulent competition. However, there is a risk that legitimate companies could face greater scrutiny or reputational harm if mistakes occur in the interpretation of online data. The safeguards HMRC has promised will, therefore, be critical in maintaining trust.

Other stakeholders, from policymakers to civil liberties groups, will, no doubt, be watching closely. The government has positioned AI as a tool for improving public services and raising revenue without additional tax rises, yet its wider strategy for regulating AI remains unsettled. With memories of past technology failures still fresh, the rollout of these systems within HMRC will be an early indicator of how the state intends to manage the trade-offs between innovation, privacy and accountability in the years ahead.

The post Featured Article : HMRC’s AI Scans (Tax-Cheats) Social Media appeared first on Mear Technology.