Signal has published a formal statement condemning a demand by the UK government that all content on all devices sold or used in the country be scanned by default for nudity, using a combination of age verification and on-device content scanning. The messaging platform warned that the proposal will not protect children, and that it lays the groundwork for a mass surveillance infrastructure with no meaningful limit on how it could be used in the future.

Don't use X? View this post on Xcancel

What the UK Government Is Demanding

Following years of pressure under the Online Safety Act, UK Prime Minister Keir Starmer issued a direct demand on June 8, 2026, calling on Apple and Google to activate device-level controls preventing children from taking, viewing, sending, receiving, or saving nude images, across the entire device, including the camera, third-party apps, messaging services, and search. Companies were given three months to comply or face legislation with fines and criminal liability for executives.

Both Apple and Google already have limited nudity detection features in place. Apple's Communication Safety scans images shared through Messages and AirDrop on child accounts, while Google offers similar controls through supervised Android accounts. But the UK government argued these tools are insufficient because they do not cover the camera itself or third-party messaging services, and demanded both companies extend the scanning to cover the full device by default.

What does "device-level scanning" mean in practice? For nudity detection to apply across an entire device, including the camera, all messaging apps, and file storage, the operating system itself would need to analyze content before it is created, saved, or sent. Because this cannot be scoped only to children without verifying who is using the device, it effectively requires all users to prove their age to the device in order to unlock unfiltered use of their own phone.

The proposal frames this as an opt-out system for verified adults, meaning nudity blocking would be on by default, with adults required to prove their age via digital ID or biometrics to disable it. Critics argue this amounts to mandatory age verification simply to use your own camera or send a private message.

Signal's Statement: "Surveillance Is Not Safety"

Signal published a full written statement titled Surveillance Is Not Safety, directly challenging the UK government's framing that the proposal is about child protection. The statement argued that children deserve safety, but that safety does not look like surveillance, funding cuts to social services, and cover-ups. It described the proposal as dangerous for everyone, not just children.

"The UK government's demand that all content on all devices sold or used in the UK be scanned on the presumption of nudity, using a dystopian combination of age verification and content scanning, will not safeguard children. It endangers us all, whilst strengthening Apple, Google, and Microsoft's market dominance and their control over our most personal information." — Signal, June 8, 2026

Signal's statement went on to challenge the idea that such a system could be kept narrowly scoped. The company argued that mass surveillance and censorship capabilities, regardless of how sincere-sounding their initial justifications are, have never remained limited to their stated purpose once created.

"Once created, they will be expanded, forming a dangerous tool that will be wielded both in the UK and abroad to censor and surveil whatever they might consider 'threats' or 'harmful content.'" — Signal

The "On-Device" Promise Is Not a Safeguard

Supporters of client-side scanning have argued that because the analysis would happen on the device itself rather than in the cloud, it is less invasive than server-side surveillance. Signal directly rejected this framing.

The company pointed out that once scanning infrastructure is embedded in a device, its scope is defined not by the technology itself but by whoever controls the policy that governs it. A scanner that detects nudity today can be updated, without user consent and without new legislation, to flag political speech, religious content, or any material a future government decides to target.

"Promises that this system will only run on-device are cold comfort. Wherever it runs, including the 'camera' itself once it is in place on UK devices, its scope will be defined by the whims and proscriptions of the government to detect nudity today and political speech tomorrow." — Signal
Why "on-device" doesn't mean private: On-device scanning means the analysis runs locally rather than sending your files to a server. But the rules about what gets flagged and what happens when something is detected are still controlled by the software vendor or the government through policy updates. The infrastructure, once built, can be redirected without the user ever knowing.

Automatic Reporting and the Precedent Risk

Signal also warned that such tools will inevitably be used to automatically report people to government authorities. The company noted that law enforcement agencies have already sought similarly broad scanning powers in other contexts, and that the political landscape makes this a particularly dangerous time to be building that infrastructure.

Privacy groups and civil liberties organizations echoed the concern. Commentators noted that if Apple and Google build device-level compliance tools for the UK, other governments, including those with authoritarian tendencies, will use the UK precedent to demand the same access for their own purposes. The infrastructure built to protect UK children could be leveraged to surveil activists in countries where the government is less constrained by rule of law.

What Signal Says Child Safety Actually Looks Like

Rather than simply opposing the UK proposal, Signal's statement made a direct argument about what effective child safety policy should involve. The company argued that protecting children means investing in well-funded education, robust social services, and meaningful guardrails on the AI technologies and platforms governments are actively courting for economic reasons.

Signal characterized the UK government's approach as prioritizing invisible surveillance infrastructure, switched on by default and potentially rushed into law under cynical pretexts, over the actual needs of the children it claims to be protecting.

"Child safety looks like well-funded education, robust social services, and meaningful guardrails on the very AI technologies and platforms the current government is eagerly courting." — Signal

The Three-Month Deadline and What Comes Next

Apple and Google have been given until September 2026 to activate the expanded nudity detection features across their platforms or face parliamentary legislation and executive penalties. Neither company has publicly committed to complying with the expanded demand as of the time of publication.

Apple has a history of withdrawing features from the UK rather than compromising its global privacy architecture, the company previously pulled its Advanced Data Protection iCloud encryption feature from the UK market after the government demanded backdoor access, rather than weakening the feature worldwide. Analysts expect a similar response is possible here, though the implications for UK users would be significant.

UK Online Safety Act background: The Online Safety Act, passed in 2023, already requires age verification for adult websites and introduced broad duties on platforms to prevent harm to children. The June 2026 demand from Starmer's government extends the same logic to the operating system level, shifting content moderation responsibility from individual apps and websites to the device itself.

Signal's statement is one of the most direct public responses from a major privacy-focused technology company since the announcement. The situation continues to develop, and the outcome of the three-month deadline will be closely watched by privacy advocates, civil liberties groups, and technology companies operating in the UK and globally.

Sources

This article was written by DigitalEscapeTools based on Signal's published statement, publicly available government announcements, and reporting available at the time of publication.