Skip to content

Click Quick exit or press Esc twice to leave this page. Your browsing history will still show this site — clear it separately if you need to.

Intimate Image Abuse: The 2023 Online Safety Act Offences

DigitalEngland & WalesReviewed by Civil Help editorial team: 13 May 2026Next review: 13 May 202710 min
Verified against 4 sources

The Online Safety Act 2023 transformed the law on intimate image abuse. From January 2024 it became a criminal offence to share, threaten to share, or take intimate images without consent — regardless of the perpetrator's motive. A separate offence covers digitally created deepfake intimate images. This guide explains the offences, how to report, removal routes, and support.

Key points

  • From 31 January 2024 the Online Safety Act 2023 (Schedule 14) replaced previous intimate-image offences with stronger, simpler offences in Sexual Offences Act 2003 sections 66A-66D.
  • Section 66A: sharing intimate images without consent. Maximum 6 months' imprisonment (Magistrates' Court) or 6 months extendable on indictment.
  • Section 66B: threatening to share intimate images. Same penalty.
  • Section 66C: sharing/threatening to share intimate images with intent to cause alarm/distress, OR for sexual gratification, OR being aware they may cause alarm/distress. Up to 2 years imprisonment.
  • Section 66D: taking intimate images without consent (e.g. up-skirting, secret recording). Up to 2 years imprisonment.
  • Deepfake intimate images (creating without consent) is a separate offence from January 2024 with up to 2 years imprisonment.
  • Victims have rights to anonymity throughout legal proceedings. Removal routes: Revenge Porn Helpline 0345 6000 459, platform reporting, and the StopNCII.org image hashing service.

What changed in 2024

Until 2024 the main intimate image abuse offence was section 33 of the Criminal Justice and Courts Act 2015 — but it required prosecutors to prove the defendant intended to cause distress. This made many cases hard to prosecute, especially "for a laugh" sharing, malicious harassment without distress intent, and commercial uses.

The Online Safety Act 2023 (Schedule 14) inserted new sections 66A-66D into the Sexual Offences Act 2003. The key changes:

  • Section 66A: simple basic offence of sharing without consent. No "intent to cause distress" required. The mere act of sharing intimate images without consent is enough.
  • Section 66B: threatening to share, with the same simple structure.
  • Section 66C: aggravated form with intent to cause alarm, distress, or for sexual gratification (or recklessness). Higher penalty.
  • Section 66D: taking intimate images without consent. Wider than up-skirting; covers any non-consensual intimate recording.

The previous up-skirting offence (s.67A SOA 2003) and the s.33 CJCA 2015 offence were repealed. The new framework is the single statutory regime.

The deepfake offence

A separate offence was introduced by the Online Safety Act 2023 for creating or sharing digitally manufactured intimate images. The key elements:

  • Creating a digital image showing a person nude, partially nude, or engaged in sexual activity, where the person did not consent to the creation.
  • Sharing such an image.

The deepfake offence reflects the explosion of AI-generated synthetic intimate images, which had been falling through cracks in the previous legislation. The offence applies even where the underlying image is generated entirely (no real photograph involved) and where the depicted person is not informed.

This is a significant new criminal offence and has been used since 2024 for cases involving school students using AI to generate intimate images of classmates, and in adult cases involving public figures.

How to report and what to expect

If intimate images have been taken, shared, or threatened:

  1. Call 999 if there is an immediate threat of further distribution or harm.
  2. Call 101 or report online for non-emergency cases. The police will investigate; victims have automatic anonymity from the report onwards.
  3. Get a crime reference number.
  4. Preserve evidence — screenshots showing the images, URLs, dates, and the platform. Save in a secure location and provide copies to the police.
  5. Don't reply to the perpetrator — block them. Continued contact can complicate evidence.

The Revenge Porn Helpline (0345 6000 459, run by SWGfL, free, 9-5 Mon-Fri) offers specialist support: emotional support, advice on legal options, and active assistance with platform takedowns. They have established relationships with major platforms and can secure removals faster than individual users.

Removing intimate images online

Three routes for removal:

  • StopNCII.org — a service operated by the Revenge Porn Helpline. You upload the image to your own device (it does not go to the service); a digital hash is generated and shared with participating platforms (Facebook, Instagram, TikTok, Bumble, Reddit, more) which then prevent re-upload of matching images. The image itself never leaves your device. Used by tens of thousands of victims.
  • Platform reporting — every major platform has an intimate-image abuse reporting category. Use it; the response should now be faster under the Online Safety Act 2023 platform duties.
  • UK GDPR right to erasure — if the perpetrator is hosting the images on their own website, request erasure under Article 17 UK GDPR. Failure to comply is enforceable by the ICO.
  • Civil injunction — for repeated breaches or where the perpetrator is a known individual, a court injunction can restrain further sharing. Specialist solicitors handle these.

The Revenge Porn Helpline assists with all of these routes and has direct platform contacts. Use them — DIY platform reporting is hit-and-miss; specialist intervention is much faster.

The criminal process and victim anonymity

Victims of intimate image abuse have automatic lifetime anonymity from the date of complaint under section 1 Sexual Offences (Amendment) Act 1992 (as amended). This means:

  • No publication of name, address, school/employer, image, or anything likely to identify the victim.
  • The anonymity applies during and after the case, whether or not the defendant is convicted.
  • Breach of anonymity is itself a criminal offence.

In court:

  • Special Measures under Youth Justice and Criminal Evidence Act 1999 — screens, video link, removal of wigs and gowns.
  • Section 28 pre-recorded cross-examination is rolling out for adult sexual offence cases — see Phase 14 Batch 15.
  • Restraining orders can be imposed on the defendant pre- and post-conviction.

Sentences for intimate image abuse offences range from a community order or fine for one-off basic offences to multi-year custodial sentences for aggravated cases. The court considers: number of victims, distribution scale, age of victim, intent to humiliate, prior offending.

Frequently asked questions

I am under 18 and someone is threatening to share intimate images. What do I do?
Call Childline 0800 1111 or the police 101/999. If the images are of you and you are under 18, possession or distribution by anyone is a serious offence under the Protection of Children Act 1978 in addition to the new OSA offences. The Internet Watch Foundation's self-reporting tool helps remove images of under-18s.
What if the images were taken when I consented but I now want them removed?
Consent to take is not consent to share. Section 66A applies if the images are shared without your specific consent to share. Withdraw consent in writing to anyone who has the images; if they then share, that is an offence.
Can I sue the perpetrator for damages?
Yes. Misuse of private information, harassment under Protection from Harassment Act 1997, and UK GDPR Article 82 are all routes to civil damages. Typical awards £5,000-£50,000+ depending on the harm.
What about deepfakes that don't look exactly like me?
The new deepfake offence requires the image to be of an "identifiable individual". A deepfake that uses your face but is not credibly identifiable as you may not be captured by the criminal offence — but civil routes (defamation, harassment, misuse of private information) may still apply.
How long does removal take through StopNCII?
For participating platforms, the prevention of re-upload is immediate. Already-uploaded images need to be reported separately for removal. The Revenge Porn Helpline can help with both.

Official bodies and resources

Information Commissioner's Office

Regulator

The UK's independent authority for data protection and information rights, enforcing the UK GDPR and Data Protection Act 2018.

Office of Communications

Regulator

Regulates UK communications industries including telecoms, broadband, TV, radio, and postal services.

Was this page helpful?

Related guides

Removing Intimate Image Abuse (Revenge Porn)

Sharing intimate images without consent — often called "revenge porn" — is a serious criminal offence in the UK and can cause profound harm. If you are a victim, you have a range of immediate support and legal options, including the Revenge Porn Helpline (which can assist with platform removals), police reporting, and civil legal remedies.

6 min

Online Safety Act 2023: Platform Duty of Care

The Online Safety Act 2023 imposes new statutory duties on online platforms to remove illegal content, protect children, and act on user reports. Phased implementation through 2024-2026 with Ofcom as regulator. This guide explains your rights as a user, what platforms must do, and how to escalate when they fail.

10 min

Dealing with Cyberstalking

Cyberstalking involves using digital technology — social media, email, messaging apps, location tracking, or spyware — to harass, monitor, or stalk a victim. It is illegal in the UK under the Protection from Harassment Act 1997, with specific stalking offences carrying sentences of up to 10 years imprisonment. If you are a victim, a range of criminal and civil protections are available.

6 min

Removing Content from Social Media

Getting unwanted content removed from social media can be challenging, but you have a range of legal and practical tools available. Platform reporting mechanisms, UK GDPR erasure requests, defamation takedown notices, and the Online Safety Act 2023 all provide routes to removal depending on the nature of the content.

6 min

Children's Online Safety

The Online Safety Act 2023 and the ICO's Children's Code (Age Appropriate Design Code) create a comprehensive framework protecting children online in the UK. Platforms must assess risks to children, prevent access to harmful content, and apply age-appropriate settings by default. This guide explains your rights as a parent and the protections that should be in place.

6 min

Disclaimer

This information is for general guidance only and does not constitute legal advice. You should seek qualified legal help if your situation requires it.