The Regulatory Landscape Facing AI Companion Platforms in the UK

Great Britain has moved decisively to address the gap between existing media law and the rapid growth of AI-generated content platforms. The Online Safety Act 2023 received Royal Assent in October 2023, and Ofcom has been rolling out implementation phases ever since. For platforms like Promptchan, which operates in the AI girlfriend and AI-generated image space, the Act introduces a framework that is both more specific and more demanding than anything that came before it.

The Regulatory Landscape Facing AI Companion Platforms in the UK
The Regulatory Landscape Facing AI Companion Platforms in the UK

The Act creates two categories of regulated service: user-to-user platforms and search services. AI companion platforms that allow users to generate and interact with content sit firmly in the first category. This triggers a set of duties around illegal content, age assurance, and transparency that platforms must now demonstrate compliance with in order to operate lawfully in the UK.

Age Verification and Access Controls Under the Act

One of the most immediately visible changes for UK users concerns age verification. The Online Safety Act requires platforms hosting legal but age-restricted content, including adult AI-generated material, to implement robust age assurance measures. Ofcom published its Age Assurance Code of Practice in 2024, which sets out what counts as a technically robust approach. Simple self-declaration, where a user clicks a box to confirm they are over 18, no longer satisfies the compliance threshold.

Age Verification and Access Controls Under the Act
Age Verification and Access Controls Under the Act

Acceptable methods under the guidance include credit card checks, photo ID verification, digital identity services, and third-party age verification providers. Platforms that cannot demonstrate they have deployed one of these methods face enforcement action, including fines. Ofcom has the power to impose financial penalties of up to 10 percent of global annual turnover or 18 million pounds, whichever is higher.

For anyone using or considering Promptchan, understanding what the platform's verification process involves is now a practical necessity, not just an optional step. The Act makes age assurance a structural requirement rather than a voluntary safeguard.

Transparency Obligations and Terms and Conditions

The Online Safety Act also mandates a new standard of transparency from in-scope services. Platforms must publish clear, accessible terms and conditions that explain what content is permitted, how moderation decisions are made, and how users can challenge those decisions. This requirement is particularly relevant for AI-generated content platforms, where the line between permitted and prohibited material can be technically complex.

During a research session in November 2024, I pulled licensing and compliance guidance from three separate regulatory frameworks to map how transparency obligations applied across different categories of AI content tool. Building a comparison table covering audit requirements, age verification compliance, and terms and conditions obligations took the better part of a Wednesday afternoon. The exercise made clear that platforms operating in the AI companion space, including those functioning similarly to Promptchan, face a genuinely demanding documentation burden. Operators must not only have compliant terms in place but must also be able to demonstrate, on audit, that those terms are enforced consistently.

For users, this shift is meaningful. It creates an enforceable right to understand why content has been restricted or an account has been moderated. Platforms can no longer rely on opaque community guidelines as a substitute for genuine dispute resolution processes.

How the UK Online Safety Act Compares to GDPR Obligations

UK GDPR, which has been in force since January 2021 following the end of the Brexit transition period, already placed significant obligations on platforms processing personal data. The Online Safety Act adds a separate and complementary layer. Where GDPR governs how personal data is collected, stored, and used, the Online Safety Act governs what content a platform may host and how it must protect users from harm.

The two frameworks interact most directly in the area of age assurance. Collecting age verification data involves processing sensitive personal information, which means GDPR rules around data minimisation, consent, and storage limitations apply. Platforms must balance the compliance requirement to verify age with the legal obligation not to retain more personal data than is strictly necessary. This is a tension that responsible operators must address explicitly in their privacy documentation.

Reviewing Promptchan policy updates as they emerge will help UK users track how these dual obligations are being handled in practice.

Copyright, AI-Generated Images, and the Data Use and Access Act 2025

A separate but related regulatory development affects the intellectual property dimension of AI image and video generation. The UK government published a Report on Copyright and Artificial Intelligence in March 2026, presented under Section 136 of the Data Use and Access Act 2025. The report examines how existing UK copyright law applies to AI-generated works and whether the current text and data mining exception is sufficient to support responsible AI development.

Under the Copyright, Designs and Patents Act 1988, computer-generated works are recognised as a distinct category, with copyright vesting in the person who made the necessary arrangements for the work to be created. This makes UK law relatively unusual by international standards. However, the 2026 report signals that the government is actively considering reform, particularly around the transparency of training data and the rights of original creators whose work may have informed AI outputs.

For users of AI image and video generation platforms, this legislative activity is worth monitoring. If new licensing obligations are introduced for AI training datasets, the operational costs for platforms could change, which may in turn affect service terms, pricing, or feature availability.

What UK Users Should Do Now

Practical steps exist for any UK user who wants to engage with AI companion platforms in a well-informed way. Reading the platform's terms and conditions in full is the starting point. Specifically, look for clauses addressing age verification, content moderation, and dispute resolution. If those sections are absent or vague, that is a signal worth taking seriously from a player protection standpoint.

Checking whether the platform has published a transparency report is a useful second step. The Online Safety Act will eventually require qualifying services to produce annual transparency reports covering content removal decisions, appeals, and risk assessment outcomes. Platforms that are already publishing this information voluntarily are demonstrating a higher baseline of compliance.

The safety overview for Promptchan covers what is publicly known about the platform's approach to user protection. Reading it alongside the platform's own terms gives a more complete picture than either document alone.

Users who believe their data has been handled incorrectly retain rights under UK GDPR, including the right to submit a Subject Access Request to the platform and, if unresolved, to escalate to the Information Commissioner's Office. These are independent rights that exist regardless of how an AI platform frames its own policies.