In June, Keir Starmer announced at London Tech Week that tech firms have until September to introduce device controls that prevent children from sending and receiving sexually explicit images. The plan requires on-device or client-side scanning, and has been framed as a child safety measure. For enterprise security teams, it raises a different set of questions entirely.
For enterprises, the proposal challenges one of the core assumptions underpinning modern cybersecurity: that devices can be trusted to process sensitive information without external inspection.
