UK TIGHTENS RULES ON INTIMATE IMAGE ABUSE

INDUSTRY DESK■ 1 MIN READ

MON, MAY 18, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Ofcom will update its codes of practice to require social media platforms, messaging services, and online forums to detect and remove intimate image abuse. The move targets the spread of non-consensual intimate images and AI-generated deepfakes, which disproportionately affect women and girls.

UK regulator Ofcom is introducing stricter requirements for tech firms to combat intimate image abuse, commonly known as "revenge porn," and synthetic media created using artificial intelligence. Service providers will be mandated to implement detection systems to identify and remove abusive content before it spreads widely. The updated codes of practice address a growing problem where intimate images are shared without consent, often intended to humiliate or harm victims. The rules also tackle AI-generated deepfakes that create fabricated intimate imagery. Women and girls represent the majority of targets for these abuses. Ofcom's enforcement powers will ensure compliance among major platforms. Violations could result in significant penalties for non-compliance. The regulatory update reflects broader efforts across the UK government to address online harms and protect vulnerable users from digital abuse.

■ SOURCES

► The Guardian — Technology

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P431LAPD CUTS TIES WITH FLOCK SURVEILLANCE

The Los Angeles Police Department has allowed its contract with surveillance company Flock to expire, citing serious civil liberties and privacy concerns. The move marks a significant departure for one of Flock's largest government customers.

JUST NOW— Security Desk

P430LIDL DISCLOSES DATA BREACH AT SERVICE PROVIDER

Lidl has notified customers across Germany, Belgium, and the Netherlands that their personal information was compromised in a breach targeting a third-party service provider.

JUST NOW— Security Desk

P427GROK UPLOADED USER DIRECTORY TO XAI SERVERS

A user reported that Grok, xAI's AI chatbot, uploaded their local user directory to xAI's servers without authorization. The incident has sparked discussion about data handling practices in AI systems.

JUST NOW— AI Desk

P424CISA DETAILS LESSONS FROM MONTHS-LONG GITHUB LEAK

The Cybersecurity and Infrastructure Security Agency has released a postmortem on a significant security breach where a contractor accidentally published internal credentials—including AWS Govcloud keys—to a public GitHub repository. The credentials remained exposed for nearly six months before KrebsOnSecurity alerted the agency.

JUST NOW— Dev Desk

◄ BACK TO NEWS

UK TIGHTENS RULES ON INTIMATE IMAGE ABUSE

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF