There's still some little confusion as to what is happening in the run up to the new AV date. In particular the press seem vague about when the three months businesses will have to implement their solutions will be. As far as I can make out this seems the likely chronology for AV implementation now:
19 March: A new code of practice (PAS 1296) for AV suppliers is published, sponsored by the DPA. (This date was announced on Thursday at a press conference* and it's a "due diligence code" according to
theregister. Presumably this is part of the "draft" Guidance on Age-verification Arrangements and draft Guidance on Ancillary Service Providers the BBFC was supposed to be issuing "later this month" according to the March 10th press release that Munch linked to?
)
Late March to Mid-April: BBFC runs a public consultation on these proposed AV solutions.
ca. Late April: Having considered all the responses the BBFC will publish them all "before submitting final versions of the Guidance to the Secretary of State for approval." (
BBFC site) These (final?) guidelines will then be published. (These should
outline how they are going to "police the space, detail what blocking those that don't comply will entail, and what the appeals process will be." Platform providers have so far been working on the 'best guess' as to what requirements these will contain for them.)
25 May: New EU General Data Protection Regulations come into effect. (Along with the UK's own new Data Protection Bill, current going through parliment and due to become law next year, the government thinks that these are adequate for AV privacy concerns, opponents disagree.)
20 July: Parliamentary summer recess begins.
4 September: Parliament resumes.
?Early September: House of Commons debate and vote on AV regulations. (MPs must vote in favour before full implementation can happen. Since conference month begins Sept. 13th this date seems the aim.)
September to December: Relevant firms have "up to" three months to implement AV solution(s).
Ca.Mid-December: Regulations are enforcable.
AgeID have also said that "We may test AgeID on a small sample of traffic prior to the law being enforced." Each site using their platform will have a non-pornographic landing page especially for UK users. (
wired.co.uk)
Meanwhile, the chairman of the DPA has admitted trying to AV social media sites, Twitter in particular, would be a no-go with the public. He confirms that social media sites haven't even engaged with the government on the matter. (This is why the government have been resorting to sound bites suggesting more self-regulation should come from them of late.)
Like theregister, I wonder if the government has finally realised, amongst other things, that trying to push this through with AgeID as the "only practical solution" (
The independent) was a very bad idea. The delay will hopefully allow others to pitch in.
The BBFC site states: "We expect to see a number of solutions [emerging]." The DPA chair suggested the BBFC could mandate that the public is given a choice of AV gateways on each site (more cost to the websites). That would be interesting if applied to the babeshows sites.
Previously unreferenced main sources:
http://www.bbc.co.uk/news/technology-43370999
https://www.theverge.com/2018/3/12/17108...nd-of-year
https://www.theguardian.com/technology/2...tion-rules
* Check out how the peer involved continues to patronise critics. Claiming that privacy concerns couldn't be address in the documents around te DEB because they were covered elsewhere, he says "[perhaps] that's too subtle for the organisations that have been trying to take a swing at it." Erm... no, perhaps you should consider communicating your intent to the public more clearly and actually address the true nature of the lawyer-made argument - that things are not specific enough in those other bills.