Criminal framework

Online Safety Act 2023, sections 187 and 188 (sharing or threatening to share intimate photograph or film). The statute was enacted 2023 (replacing s.33 of the Criminal Justice and Courts Act 2015). Up to 6 months on summary conviction. Up to 2 years on indictment for the threatening offence.

Civil and data protection framework

UK GDPR Article 17 (right to erasure) plus Data Protection Act 2018 provides the parallel civil route. Information Commissioner's Office (ICO) is the national supervisory authority and accepts complaints against any controller processing intimate imagery without lawful basis. The official site is https://ico.org.uk.

Direct takedown authority

Ofcom regulates platform compliance under the Online Safety Act 2023 with civil penalty powers up to 10 percent of global turnover.

Official victim support

Revenge Porn Helpline is the recognised support service. Available at https://revengepornhelpline.org.uk.

Five step removal process for United Kingdom victims

  1. 1

    Preserve evidence before any contact with the perpetrator

    Capture full page screenshots with URLs visible. Save the original files. Note timestamps. This evidence supports both the Online Safety Act 2023, ss.187 to 188 complaint and any UK GDPR Article 17 (right to erasure) plus Data Protection Act 2018 request.

  2. 2

    File a criminal complaint under Online Safety Act 2023, ss.187 to 188

    Report to local police or the national cybercrime unit. Revenge Porn Helpline can assist with the report.

  3. 3

    Submit an erasure request under UK GDPR Article 17 (right to erasure) plus Data Protection Act 2018

    Send a written request to each platform's designated data protection contact citing the legal basis. ICO can be petitioned if the platform fails to comply within 30 days.

  4. 4

    Send a US TAKE IT DOWN Act notice in parallel for covered platforms

    When the platform is subject to US jurisdiction, the 48 hour federal removal obligation applies in parallel with your domestic rights. ScanErase files these notices automatically.

  5. 5

    Track and escalate non compliant platforms

    Document every notice and every response. Use the regulator's takedown authority for non compliant platforms.

Frequently asked questions

What is the criminal NCII statute in United Kingdom?

Online Safety Act 2023, sections 187 and 188 (sharing or threatening to share intimate photograph or film). Enacted 2023 (replacing s.33 of the Criminal Justice and Courts Act 2015). Up to 6 months on summary conviction. Up to 2 years on indictment for the threatening offence.

Who enforces data protection rights in United Kingdom?

Information Commissioner's Office (ICO) is the national authority. Official site: https://ico.org.uk.

Is there an official victim support service in United Kingdom?

Yes. Revenge Porn Helpline provides direct help to victims. Site: https://revengepornhelpline.org.uk.

Does any regulator in United Kingdom have direct takedown power?

Ofcom regulates platform compliance under the Online Safety Act 2023 with civil penalty powers up to 10 percent of global turnover.

Can a United Kingdom resident also use the US TAKE IT DOWN Act?

Yes when the hosting platform is subject to US jurisdiction. The TAKE IT DOWN Act applies to covered platforms regardless of where the victim resides. ScanErase's scan finds every US covered platform hosting your images, so you can file notices there in parallel with UK GDPR Article 17 (right to erasure) plus Data Protection Act 2018 requests.

Related guides