Lisa Nandy told the House of Commons on 8 September 2026 that the government will prepare primary legislation requiring major technology platforms to introduce device-level protections designed to stop children taking, sharing or viewing nude images on phones and tablets. Ministers are also exploring what further legislation may be needed to require apps used by children to block access to, and sharing of, nudity. (gov.uk) In policy terms, the statement moves this issue from voluntary commitments to a stated willingness to legislate. Ministers are no longer presenting child nudity controls only as a product-design question for the technology sector, but as a matter for statutory duty and parliamentary scrutiny. The second sentence is an inference drawn from the statement itself. (gov.uk)
The announcement sits on a timeline already set out by government. The December 2025 Violence Against Women and Girls action plan committed ministers to making it impossible for children in the UK to take, share or view a nude image, and on 8 June 2026 the government gave Apple and Google three months to produce roadmaps for stronger device protections or face legislation. (gov.uk) That June intervention matters because it established the current September deadline as an enforcement point rather than a routine progress update. What arrived on 8 September was therefore not a new policy area, but the point at which ministers decided voluntary movement had not gone far enough. The final sentence is an inference based on the June and September government statements. (gov.uk)
Nandy said officials in her department and the Home Office had worked with Apple and Google since June, including engagement with senior leaders and engineers on technical options to prevent child sexual abuse and strengthen child safety online. She reported that both companies had made significant commitments, that operating-system changes were being developed, and that ministers had seen progress towards blocking rather than merely blurring nude imagery on underage devices. (gov.uk) The statement also pointed to Apple's recent UK rollout of operating-system level age assurance linked to safety features on iMessage and FaceTime. Even so, the government's position was that the progress disclosed to Parliament still fell short of the scale of harm ministers believe they are trying to address. (gov.uk)
The case for intervention was framed around grooming, coercion and sexual extortion. In the Commons statement, Nandy cited Internet Watch Foundation evidence that 91% of child sexual abuse images are self-generated by children, and said around 9,000 child sexual abuse offences each year involve an online element, with under-18s the subject of almost a quarter of online blackmail. (gov.uk) The National Crime Agency has separately argued that device restrictions matter because they can stop abusive imagery being created or shared in the first place, rather than only dealing with circulation after the event. That distinction helps explain why ministers are now focusing on handset and app design as well as platform moderation. The second sentence is an inference supported by the NCA response and the government statement. (nationalcrimeagency.gov.uk)
The legal significance is straightforward: primary legislation means ministers want Parliament to create a direct statutory duty, rather than relying only on voluntary undertakings or regulator guidance. That would sit on top of an existing framework in which the Online Safety Act already requires platforms to protect under-18s from harmful material such as pornography, self-harm, suicide and eating disorder content, using measures including age assurance for access to the most serious content. (gov.uk) Government documents published in June 2026 said ministers intended to build on the Online Safety Act rather than replace it. Taken together, those documents suggest the new Bill would push regulation further upstream, from service-level duties about what children can see on a platform to technical restrictions on what can be created, sent or received on the device itself. The final sentence is an inference from the existing framework and the September statement, not wording published by government. (gov.uk)
Important detail is still missing. The speech did not publish draft clauses, define which companies would count as 'major tech platforms', or set out how ministers will decide which apps fall within the new duty to prevent children accessing or sharing nudity. (gov.uk) There are, however, signals in the wider 2026 programme. The June progress statement said the government also wants to restrict risky functions used by children on other services, including communication with strangers and livestreaming, and said those measures would sit alongside stronger device protections. On that basis, the eventual scope could extend beyond traditional social media to messaging, gaming and other consumer apps where image-sharing or direct-contact features exist, although the final design has not yet been published. The final sentence is an inference. (gov.uk)
For platform operators, the immediate message is that product roadmaps are now likely to be tested against legislation rather than against informal ministerial pressure alone. Nandy told MPs that if companies develop and implement technical solutions while government work continues, ministers will reassess whether legislation is still necessary, creating a clear incentive for rapid pre-legislative compliance. (gov.uk) For parents, schools and safeguarding professionals, the practical effect would be a move away from relying only on takedown after circulation. The National Crime Agency said preventing images from being created or shared can reduce long-term and repeated harm to victims, which is the policy outcome ministers are now seeking to translate into law. (nationalcrimeagency.gov.uk) For Parliament and regulators, the next scrutiny points are likely to be proportionality, privacy safeguards, age-assurance standards, enforcement, and how any new duties will sit with existing data protection rules. Current government guidance already states that age assurance measures must comply with UK data protection law, so the eventual Bill will need to show how stronger child safety controls can be implemented without creating wider legal uncertainty for providers or users. (gov.uk)