Intimate Image Abuse: The 2023 Online Safety Act Offences
The Online Safety Act 2023 transformed the law on intimate image abuse. From January 2024 it became a criminal offence to share, threaten to share, or take intimate images without consent — regardless of the perpetrator's motive. A separate offence covers digitally created deepfake intimate images. This guide explains the offences, how to report, removal routes, and support.
Key points
- From 31 January 2024 the Online Safety Act 2023 (Schedule 14) replaced previous intimate-image offences with stronger, simpler offences in Sexual Offences Act 2003 sections 66A-66D.
- Section 66A: sharing intimate images without consent. Maximum 6 months' imprisonment (Magistrates' Court) or 6 months extendable on indictment.
- Section 66B: threatening to share intimate images. Same penalty.
- Section 66C: sharing/threatening to share intimate images with intent to cause alarm/distress, OR for sexual gratification, OR being aware they may cause alarm/distress. Up to 2 years imprisonment.
- Section 66D: taking intimate images without consent (e.g. up-skirting, secret recording). Up to 2 years imprisonment.
- Deepfake intimate images (creating without consent) is a separate offence from January 2024 with up to 2 years imprisonment.
- Victims have rights to anonymity throughout legal proceedings. Removal routes: Revenge Porn Helpline 0345 6000 459, platform reporting, and the StopNCII.org image hashing service.
What changed in 2024
Until 2024 the main intimate image abuse offence was section 33 of the Criminal Justice and Courts Act 2015 — but it required prosecutors to prove the defendant intended to cause distress. This made many cases hard to prosecute, especially "for a laugh" sharing, malicious harassment without distress intent, and commercial uses.
The Online Safety Act 2023 (Schedule 14) inserted new sections 66A-66D into the Sexual Offences Act 2003. The key changes:
- Section 66A: simple basic offence of sharing without consent. No "intent to cause distress" required. The mere act of sharing intimate images without consent is enough.
- Section 66B: threatening to share, with the same simple structure.
- Section 66C: aggravated form with intent to cause alarm, distress, or for sexual gratification (or recklessness). Higher penalty.
- Section 66D: taking intimate images without consent. Wider than up-skirting; covers any non-consensual intimate recording.
The previous up-skirting offence (s.67A SOA 2003) and the s.33 CJCA 2015 offence were repealed. The new framework is the single statutory regime.
The deepfake offence
A separate offence was introduced by the Online Safety Act 2023 for creating or sharing digitally manufactured intimate images. The key elements:
- Creating a digital image showing a person nude, partially nude, or engaged in sexual activity, where the person did not consent to the creation.
- Sharing such an image.
The deepfake offence reflects the explosion of AI-generated synthetic intimate images, which had been falling through cracks in the previous legislation. The offence applies even where the underlying image is generated entirely (no real photograph involved) and where the depicted person is not informed.
This is a significant new criminal offence and has been used since 2024 for cases involving school students using AI to generate intimate images of classmates, and in adult cases involving public figures.
How to report and what to expect
If intimate images have been taken, shared, or threatened:
- Call 999 if there is an immediate threat of further distribution or harm.
- Call 101 or report online for non-emergency cases. The police will investigate; victims have automatic anonymity from the report onwards.
- Get a crime reference number.
- Preserve evidence — screenshots showing the images, URLs, dates, and the platform. Save in a secure location and provide copies to the police.
- Don't reply to the perpetrator — block them. Continued contact can complicate evidence.
The Revenge Porn Helpline (0345 6000 459, run by SWGfL, free, 9-5 Mon-Fri) offers specialist support: emotional support, advice on legal options, and active assistance with platform takedowns. They have established relationships with major platforms and can secure removals faster than individual users.
Removing intimate images online
Three routes for removal:
- StopNCII.org — a service operated by the Revenge Porn Helpline. You upload the image to your own device (it does not go to the service); a digital hash is generated and shared with participating platforms (Facebook, Instagram, TikTok, Bumble, Reddit, more) which then prevent re-upload of matching images. The image itself never leaves your device. Used by tens of thousands of victims.
- Platform reporting — every major platform has an intimate-image abuse reporting category. Use it; the response should now be faster under the Online Safety Act 2023 platform duties.
- UK GDPR right to erasure — if the perpetrator is hosting the images on their own website, request erasure under Article 17 UK GDPR. Failure to comply is enforceable by the ICO.
- Civil injunction — for repeated breaches or where the perpetrator is a known individual, a court injunction can restrain further sharing. Specialist solicitors handle these.
The Revenge Porn Helpline assists with all of these routes and has direct platform contacts. Use them — DIY platform reporting is hit-and-miss; specialist intervention is much faster.
The criminal process and victim anonymity
Victims of intimate image abuse have automatic lifetime anonymity from the date of complaint under section 1 Sexual Offences (Amendment) Act 1992 (as amended). This means:
- No publication of name, address, school/employer, image, or anything likely to identify the victim.
- The anonymity applies during and after the case, whether or not the defendant is convicted.
- Breach of anonymity is itself a criminal offence.
In court:
- Special Measures under Youth Justice and Criminal Evidence Act 1999 — screens, video link, removal of wigs and gowns.
- Section 28 pre-recorded cross-examination is rolling out for adult sexual offence cases — see Phase 14 Batch 15.
- Restraining orders can be imposed on the defendant pre- and post-conviction.
Sentences for intimate image abuse offences range from a community order or fine for one-off basic offences to multi-year custodial sentences for aggravated cases. The court considers: number of victims, distribution scale, age of victim, intent to humiliate, prior offending.
Frequently asked questions
I am under 18 and someone is threatening to share intimate images. What do I do?
What if the images were taken when I consented but I now want them removed?
Can I sue the perpetrator for damages?
What about deepfakes that don't look exactly like me?
How long does removal take through StopNCII?
What to do next
- 1
- 2
- 3
- 4
Official bodies and resources
Information Commissioner's Office
RegulatorThe UK's independent authority for data protection and information rights, enforcing the UK GDPR and Data Protection Act 2018.
Office of Communications
RegulatorRegulates UK communications industries including telecoms, broadband, TV, radio, and postal services.
Was this page helpful?
Related guides
Removing Intimate Image Abuse (Revenge Porn)
Sharing intimate images without consent — often called "revenge porn" — is a serious criminal offence in the UK and can cause profound harm. If you are a victim, you have a range of immediate support and legal options, including the Revenge Porn Helpline (which can assist with platform removals), police reporting, and civil legal remedies.
6 min
Online Safety Act 2023: Platform Duty of Care
The Online Safety Act 2023 imposes new statutory duties on online platforms to remove illegal content, protect children, and act on user reports. Phased implementation through 2024-2026 with Ofcom as regulator. This guide explains your rights as a user, what platforms must do, and how to escalate when they fail.
10 min
Dealing with Cyberstalking
Cyberstalking involves using digital technology — social media, email, messaging apps, location tracking, or spyware — to harass, monitor, or stalk a victim. It is illegal in the UK under the Protection from Harassment Act 1997, with specific stalking offences carrying sentences of up to 10 years imprisonment. If you are a victim, a range of criminal and civil protections are available.
6 min
Removing Content from Social Media
Getting unwanted content removed from social media can be challenging, but you have a range of legal and practical tools available. Platform reporting mechanisms, UK GDPR erasure requests, defamation takedown notices, and the Online Safety Act 2023 all provide routes to removal depending on the nature of the content.
6 min
Children's Online Safety
The Online Safety Act 2023 and the ICO's Children's Code (Age Appropriate Design Code) create a comprehensive framework protecting children online in the UK. Platforms must assess risks to children, prevent access to harmful content, and apply age-appropriate settings by default. This guide explains your rights as a parent and the protections that should be in place.
6 min
Disclaimer