Ofcom Enforces NCII Tech Adoption: What Dating Apps Must Do

UK communications regulator Ofcom has launched a comprehensive enforcement programme targeting the spread of non-consensual intimate images across online platforms. The initiative focuses on ensuring services adopt hash matching technology to identify and prevent the circulation of known harmful content. The programme forms part of Ofcom's broader commitment to protecting women and girls online, who are disproportionately affected by intimate image abuse and related harms.

New Technology Standards Come Into Force

Ofcom has formally issued amended codes introducing measures around hash matching, a technology that can identify known images without requiring platforms to directly view the underlying content. The measures come into effect on September 30, after which Ofcom says formal enforcement action under the programme can begin. Hash matching allows platforms to detect previously identified harmful content by comparing digital fingerprints rather than examining actual images.

The regulator is working with StopNCII.org, which maintains a database used by platforms to identify known non-consensual intimate images. Ofcom and StopNCII.org have signed a memorandum of understanding covering information-sharing and cooperation around the technology's adoption. This partnership ensures platforms have access to up-to-date databases of known harmful content.

The development is relevant to dating services because intimate image abuse can occur both through the sharing of content between users and through the wider circulation of images uploaded elsewhere. Dating apps are also subject to Online Safety Act obligations covering illegal content and other specified harms. Platforms must now demonstrate proactive measures to prevent the spread of known harmful images.

Impact on Women and Girls Online

The programme forms part of Ofcom's wider work to improve online safety for women and girls, who the regulator says are disproportionately affected by harms including intimate image abuse, cyberflashing, stalking, harassment and coercive behaviour. These forms of abuse can have devastating psychological and social consequences for victims. The enforcement programme aims to reduce the prevalence of these harms by making it harder for known harmful content to circulate.

Women and girls are disproportionately affected by harms including intimate image abuse, cyberflashing, stalking, harassment and coercive behaviour.

Ofcom said its work will examine whether relevant services are implementing the new measures effectively, while also continuing broader engagement with platforms on safety-by-design. The regulator previously published guidance containing more than 60 examples of measures that services could adopt to improve women and girls' online safety, beyond their minimum legal requirements. This guidance covers areas such as user verification, content moderation, and reporting mechanisms.

Gathering Evidence and Future Policy Development

Alongside the enforcement programme, Ofcom has opened a Call for Evidence seeking information about how women and girls' experiences online have changed since its previous guidance was published in November 2025. Responses are due by 5pm on November 4, 2026, with findings expected in summer 2027. The Call for Evidence will help Ofcom understand whether current measures are working and identify areas requiring additional intervention.

The regulator is also preparing further policy work. It plans to consult by the end of 2026 on a new duty requiring services to remove non-consensual intimate images within 48 hours of being reported. The duty stems from the Crime and Policing Act 2026.

Services will be required to remove non-consensual intimate images within 48 hours of being reported under new duties planned for consultation by the end of 2026.

This upcoming 48-hour removal requirement represents a significant tightening of platform obligations. Services will need to ensure they have adequate moderation resources and processes to meet this deadline. Failure to comply could result in significant penalties under the Online Safety Act framework.