Category 1 services must offer every adult UK user the option to verify their identity (by any process, not necessarily documents) where verification is not already required, and explain how it works in the terms of service; Ofcom must issue guidance with regard to vulnerable users (s.65). Status: section 64 is not yet in force (checked on legislation.gov.uk 2026-09-26).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.