The Online Safety Bill / Internet Safety Act
It would be embarrassing, if it wasn't so damn deserving of public shame and ridicule
As I mentioned in my last article, I have been somewhere lost deep down the rabbit hole of the UK’s Online Safety Bill - the version that is to be given Royal assent and enacted as the Internet Safety Act 2023. What follows is just an interim off-the-cuff reaction on my first brief thumb through the entire soporific door-stop.
First, speaking as someone with almost two decades in IT/ICT - first as a senior systems engineer building server rooms and data platforms, and later as a solution and infrastructure architect designing and implementing everything from large virtualisation platforms when they became a thing, and even entire datacentres, I can say this:
Either the politicians who wrote the Online Safety Bill were being deliberately obtuse and vague in order to build a law that could trap almost anyone for almost anything online, or they really are as technologically illiterate as some commentators said back in 2021. Even when measured against the best that legislating and lawmaking has to offer, the Online Safety Bill is an exceedingly verbose, repetitive waste of over 300 pages and in many sections, a great way to say nothing at all.
In fact, if only the politicians listened to all the highly knowledgable technologists like me who for two years have been telling them they were barking up a squirrel-less tree, or even the pleading encouragement of singer Ronan Keating, I could have done something far more interesting with my week.
Online Harms/Safety Laws
The UK’s Online Safety Bill (OSB) was first published in draft form during the Covid-19 pandemic in May 2021. The OSB appears to have been targeted as a blunt instrument against what were considered to be the issues of the day1. It is a long and torturous document consisting of eleven parts encapsulated in over three-hundred pages that have received more than a hundred major and minor amendments in just the last six months. The OSB is seemingly predicated on parliament’s belief that in spite of the last 15-20 years (and perhaps because of it), we are all too naïve and psychologically fragile to be allowed unrestricted access to the internet and all interactions with the online world should be monitored, controlled and censored by the government working in conjunction with big tech companies. This monitoring would occur on even innocuous communications where we might simply be messaging a friend to set up a meeting or saying happy birthday to a loved one.
Parliament claim the OSB’s purpose is to make use of the internet safer for all individuals2. Meanwhile, we can only infer that a safer internet simply means what remains after operation of the Bill, because the Bill itself never actually provides concrete definitions for many terms - leaving big tech, police and courts to infer what might constitute a safe internet or the quantum for nebulous harms that providers are required to protect us from. There are three key areas where the UK’s OSB has significant potential to negatively impact the safety of every internet user in the UK:
First, the OSB introduces new rules for age gating on the internet that could see many more people being targeted by phishing attacks and becoming victims of identity theft. The OSB provides that age verification or estimation must be highly effective at correctly determining if the user is a child3. For most web services the current process of having a click box for the user to agree to the statement I am over 18 will no longer be sufficient. Under the OSB, a platform or service provider is only allowed to conclude that children cannot access their service if they have age verification or estimation in place. Websites will have to begin requiring users to provide age verification identification such as a copy of their drivers license or passport that will for repudiation will be verified using the previously established know your customer (KYC) checks. However, it is only a matter of time before all manner of illegitimate and fraudulent websites also compel people landing on their sites to provide identification, except that in these cases the result will be a marked increase in identity fraud.
Second, in order to comply with the OSB, tech companies and solution providers will be required to embed backdoors or directly spy on the user’s device that is running any application or service that uses E2EE. Where OFCOM issues a notice on solution providers such as Signal or WhatsApp under S.122 of the OSB, the provider will be required to start scanning your messages before they are sent to the receiving party. Commentators like Talk TV’s Julia Hartley-Brewer point out that the OSB removes the balance that currently exists between keeping people safe from the minutely small number of child abusers and organised criminals, and the rights of the overwhelming majority of ordinary law abiding citizens to have conversations with their family and friends and buy groceries on the internet without the ever-present eye of Big Brother or The State telling us what websites we can access and what we can and cannot say4. Rather than maintaining the standard for targeted surveillance based on evidence or suspicion of criminality with judicial oversight, the OSB effectively mandates installation of a ‘bug’ on every citizen’s smartphone and computer to monitor everything we say and do. It is inescapable that the impact of the OSB is seen by many as being entirely disproportionate to the harms and alleged criminality the government claim it is intended to protect us from.
Third, the OSB will usher in a new era of increased and unrestrained censorship. Some sections of the OSB such as those on protecting content of democratic importance seem almost self-contradictory, with the only inference being that parliament intends to protect only their preferred side of any political debate. For example, Section 17 calls both for protection of content of democratic importance that contributes to political debate, and for taking actions such as warning, suspending or banning individual users for production of content which they may legitimately intend as a contribution to the political debate - excepting that it expresses a contrasting point of view to that which the politicians of the day prefer. Sections 17-19 could be read and potentially reframed as duties to protect against content of democratic dissent.
Section 20 is a provision that could be (ab)used by the easily offended, online trolls and vindictive persons to raise false or vexatious complaints of psychological harm regarding otherwise legal content so that platform owners and service providers are forced to take it down and potentially sanction the individual who created or posted the content. This becomes even more difficult when platform and service providers are required to undertake risk assessment duties in order to establish response policies that must take into account the potentially unquantifiable risk and severity of potential harm5. What might be considered as harmful by one person might be just another day at the office for someone else6. Similarly, what one parent may deem as harmful content for their child to be exposed to, another parent may consider as necessary educational material7. The OSB appears silent as to who, beyond the checklists and policies of the complaints support and risk assessment teams of the platform or service provider, and how we should efficiently and expeditiously evaluate these disagreements. The OSB makes it easier and possibly even necessary to protect shareholders and content creators from criminal prosecution and financial liability by simply accepting every complaint on face value, and thus ensures we become an overly censorious civilisation headed towards Idiocracy8. It would also seem that deferring these matters to the courts will be expensive, time consuming and more alike swatting a fly with a sledgehammer. How are users, platform and service providers, police and the courts meant to evaluate the true extent of any individual’s claim of psychological harm, especially when it can be made by the more easily offended, trolls and vexatious persons. How are courts to weight their allegation of psychological harm against the normal civil reasonable person standard?
Many other issues exist in the OSB, including that it is wasteful in part because it calls on service providers to censor content that was already actively protected by other legislation, for example: (i) discrimination or abuse of an individual based on their protected characteristics9 - which already enjoyed protection under, for example, the Equality Act 2010 and The Public Order Act 198610; and (ii) promoting, encouraging or providing instructions for suicide11 which in the OSB carries 5 years imprisonment - but had for many years, irrespective of the media used to convey the culpable imputation, been a criminal offence carrying a maximum penalty of 14 years imprisonment under Section 2 of the Suicide Act 1961.
When:
suicide rates rose by only 2.5/100,00012 population (0.000025%) during the 15 year period after the internet became ubiquitous in homes and schools (Memon et al, 2018);
mainstream studies say websites like Instagram are only a factor in 6% of the rise in suicides attributed to the internet - so 6% of the 2.5/100,000 population, which is only 0.15/100,000 or 0.0000015% (Johnson, 2021);
cyberbullying may only be a factor in around 1/9 suicides and cybersuicide pacts were only a feature in at most 24.7/100,000 (or 0.000247%) of all suicides (Luxton et al, 2012);
It is difficult to understand how UK politicians believe these repeated OSB provisions with less harsher punishments will have an appreciable effect on the unverifiable Hansard claim of 5,583 annual suicides13.
In response to the OSB, many tech companies including WhatsApp and Signal have already indicated their intention to leave the UK market. However, it is unlikely that this would result in UK users being unable to use these apps because many tech savvy people will simply find a way around the OSB. Just as Apple and jailbreakers have played a cat-and-mouse game for more than a decade, with Apple patching a bug that allowed an exploit to jailbreak a device and the jailbreakers simply finding another exploit and continuing unabated, it is entirely foreseeable that users of E2EE apps will simply download backdoor-less compiled, binary or source code versions from users in other jurisdictions and use them via VPNs. If the histories of both PirateBay and China’s ongoing and often failing attempts to prevent citizens from accessing websites and using these apps has taught us anything, it is that on the internet almost nothing can or will ever be truly stopped.
That being so, we can only infer that the real reason much of the OSB exists can only be because the government wants to monitor, capture, censor and control what the broader non-tech savvy population sees and does on the internet.
Predominately these were claims of mis- dis- and mal-information regarding the various covid responses - lockdowns, masks and injectables, and the simmering issues arising out of promotion of the transgender debate - ranging from promotion of gender and sexually targeted content in primary and high schools, the clandestine encouragement of young children to socially transition during school hours without disclosure to parents, the abuse of Gillick competence to allow children as young as 10 and 12 to self-consent to receiving puberty blockers and later, cross-sex hormones, and the broad disagreement of large groups of parents and the general public with social institutions like schools and councils supporting and promoting drag queen displays and story hours for young children. In many cases the alleged mis- dis- and mal-information around covid issues have been shown to be truth - lockdowns did financially, psychologically and physically harm many, the covid-19 injectables were causing blood clots and myocarditis for some; and evidence did come to light that several of the drag queens that schools and councils engaged for events had prior convictions for sex offences, many involving children (Shaw, 2021; Van Maren, 2022; Woulahan, 2023) - meanwhile, protestors like 59yo Lance O’Connor were arrested and charged for ‘hostility towards sexual orientation and transgender identity’ for alerting the public to their convictions (ITVx, 2023).
Online Safety Bill, Part 1, Section 1(1).
For example: Online Safety Bill, Part 3, S.12(6).
Hartley-Brewer, J. (2023). “We can’t trust these people!” Julia Hartley-Brewer questions New Online Safety Bill.
For example, The Online Safety Bill, Part 3, S.12(6).
For example: a young woman who had a bad obstetric experience resulting in a stillbirth might feel psychologically harmed by and object to or seek to censor material showing the process of natural childbirth that a midwife would consider to be educational in nature.
For example: some parents, especially those of particular faiths, might consider common sex education material like that of the Everything a Teenage Boy/Girl Should Know books to be objectional based on their beliefs, while other parents might consider it necessary to their child’s socio-sexual development. There are also religious groups who consider teaching Darwinism to be blasphemous and objectional, while others consider natural evolution to be important to their child’s scientific education.
Idiocracy is a 2006 science fiction movie where a U.S. Army librarian at the lower end of current intelligence levels wakes up 500 years in the future to find that people have become vacuously stupid because they no longer needed to be intelligent or physically fit due to the benefits of technology.
Online Safety Bill, Part 3, S.16(4) and (5).
The Public Order Act 1986 at Part 3 prohibits the use of threatening, abusive or insulting words or behaviour, or displays of any material which is threatening, abusive or insulting. Section 4A made it an offence to cause alarm or distress including when using abusive or insulting words or behaviours. These provisions essentially cover the same ground almost verbatim as the OSB S.16(4) and (5).
Online Safety Bill, Part 3, S.16(3)(a).
From 10.5/100,000 (0.000105%) of the population in the 1990s before the internet became ubiquitous in homes and schools to 13/100,000 (0.00013%) 15 years later when it was. Some researchers, politicians and the mainstream media like to point out that this is a relative risk rate (RRR) increase of 24% while failing to point out that the actual risk rate (ARR) increase is actually from a very small number to an only slightly larger number. The difference pre- and post-internet suggests that the majority of suicides either have no internet-based ‘information factor’, or that they have an ‘information factor’ source other than the internet.
From the Hansard of Baroness Finlay of Llandaff after the Second Reading of the OSB, Friday 3 February, 2023. https://hansard.parliament.uk/lords/2023-02-03/debates/2971DD4D-723B-479E-BECE-A4D29D20C2E2/OFCOM(DutyRegardingPreventionOfSeriousSelf-HarmAndSuicide)Bill(HL)
References
Memon, A. M., Sharma, S. G., Mohite, S. S., & Jain, S. (2018). The role of online social networking on deliberate self-harm and suicidality in adolescents: A systematized review of literature. Indian journal of psychiatry, 60(4), 384.
Johnson, K. (2021). Instagram taking its toll on teen girls’ mental health: report. NBC Connecticut. Last accessed; 7 October, 2023. Sourced from: https://www.nbcconnecticut.com/news/local/instagram-taking-its-toll-on-teen-girls-mental-health-report/2582713/
Luxton, D. D., June, J. D., & Fairall, J. M. (2012). Social media and suicide: a public health perspective. American journal of public health, 102(S2), S195-S200.
Not certain I'm allowed to provide a link to another relevant post, but here goes https://freedomresearch.substack.com/cp/137729493
The title of the above is China Convergence - basically it proposes a scenario of the West and China converging on their treatment of people. Add this to the:
1. WHO proposed power grab - International Health Regulations - currently going thro the UK Parliament,
2. the current censorship on Youtube and
3. the prevention of research papers publication with views against the establishment.
The OSB looks like another of the same.
Just like Boris learned from Trump, the West are learning form China.
Our MPs - who we elect - voted in favour of this.
We pay for the pleasure of this ever tightening tyranny.