Running an OFM agency in the UK: the four laws that decide it.

The UK question gets asked in a slightly different tone from the American one, because the criminal statutes here are older, shorter and broader. Sections 52 and 53 of the Sexual Offences Act 2003 do not require an agency to have arranged anything physical, or to have touched anyone, or to have known very much. They require control or incitement, and gain. That is worth understanding properly rather than by rumour.

The good news is that the ordinary OFM business model does not come near them, and that the risks a UK agency actually gets hit with are usually employment and data risks, not criminal ones.

The business model is lawful

Selling adult content between consenting adults is lawful in the UK. An agency that markets creators, manages their social accounts, writes and sends messages, plans content and negotiates deals is providing marketing and management services, and takes a commission for doing so. There is no offence in that description.

Selling sexual services is also not, in itself, an offence in England and Wales. What Parliament has criminalised is the activity around it — soliciting in public, keeping a brothel, and above all the exploitation offences, which are aimed squarely at people who organise and profit. An agency is, by definition, a person who organises and profits. That is why the analysis matters more here than for a creator.

Sections 52 and 53: the two that matter

Section 52 — causing or inciting prostitution for gain. It is an offence intentionally to cause or incite another person to become a prostitute in any part of the world, where you do so for or in the expectation of gain for yourself or a third person.

Section 53 — controlling prostitution for gain. It is an offence intentionally to control any of the activities of another person relating to that person's prostitution, again for or in the expectation of gain.

Both came into force on 1 May 2004 and both carry a maximum of seven years' imprisonment on indictment.

Three features make them wider than people expect:

• "Gain" is broad. Section 51 defines it as any financial advantage, including the discharge of an obligation and the provision of goods or services at a discount. An agency commission is plainly gain.
• "Control" does not mean coercion. The Court of Appeal has read control as including instruction or direction that the other person is expected to comply with. Setting rates, dictating a schedule and directing what is offered can be control.
• "Any part of the world." Section 52 is expressly extraterritorial in its terms.

None of that touches an agency managing content. All of it touches an agency that starts organising meet-ups, taking a percentage of escorting income, or brokering "collabs" that are in reality paid in-person services. Those decisions, and not the business card, are what would put a UK agency in front of a Crown Court.

Alongside them sit the Modern Slavery Act 2015 offences, where the ingredients are force, threats, deception or abuse of vulnerability, and the Proceeds of Crime Act 2002, which is what turns a conviction into the loss of everything the business earned.

The Online Safety Act and age assurance

The Online Safety Act 2023 is the biggest regulatory change the sector has seen in the UK. Ofcom's children's safety duties, including the requirement that services allowing pornography use highly effective age assurance, have been enforceable since 25 July 2025.

The duties fall mainly on platforms, and OnlyFans and its competitors have implemented their own checks. But two situations bring an agency into scope, and both are common:

• the agency runs its own site or fan portal with content or user interaction;
• the agency operates a community — a Discord, a forum, a members' area — where users interact.

The sanctions are not symbolic: up to the greater of £18 million or 10% of qualifying worldwide revenue, plus business disruption measures. If your agency publishes anything itself, this needs an answer on file rather than a hope. We cover the practical side, including what "highly effective" means and how the US position has moved, in age verification in the UK and US.

The risk that actually materialises: chatter status

Ask a UK employment lawyer what an OFM agency will really face, and it is not section 53. It is a former chatter with a claim.

UK law has three statuses: employee, worker and genuinely self-employed. Only the third has no rights. Status is determined by the reality of the relationship, not by the label in the contract, and tribunals have been increasingly willing to look past documents — Uber BV v Aslam being the case everyone cites.

The factors that decide it:

• Control: do you set the shifts, the scripts, the tone, the targets?
• Personal service: could they genuinely send a substitute?
• Mutuality of obligation: are you expected to offer work and they to accept it?
• Integration: your systems, your accounts, your email address?

A chatter working assigned shifts on the agency's accounts, following the agency's scripts, unable to send anyone else, is at minimum a worker. That brings the National Minimum Wage, 5.6 weeks of paid holiday, rest breaks, pension auto-enrolment in some cases, and protection from unlawful deductions — all of it capable of being claimed retrospectively, typically for up to two years of unpaid holiday. Across a team of six chatters over three years, that is not a rounding error.

The fix is not a better disclaimer. It is either to structure the relationship so that self-employment is genuine, or to accept worker status and pay properly. Both are survivable. What is not survivable is a team of "contractors" who are indistinguishable from staff.

UK GDPR: the exposure nobody has papered

Chatters read and write messages exchanged with fans. Those messages contain personal data, and often special category data — data revealing sex life or sexual orientation — which requires a condition under Article 9 of the UK GDPR, not merely a lawful basis under Article 6.

Concretely, an agency should have:

• clarity on whether it is a controller or a processor, and a written agreement with the creator either way;
• a data processing agreement with the creator, and with any offshore chatting supplier;
• an answer for international transfers if chatters are outside the UK, which they very often are;
• access controls and logging, so that it is known who read what;
• a retention policy, and deletion when a creator leaves;
• a breach procedure: 72 hours to notify the ICO.

Add to this the Digital Markets, Competition and Consumers Act 2024, whose unfair commercial practices regime replaced the 2008 Regulations from 6 April 2025 and gives the CMA direct enforcement powers with fines up to 10% of global turnover. Aggressive chatting practices — promises of things that will never be delivered, misleading claims about who is writing — sit squarely inside "misleading actions" and "aggressive practices". This is a far more realistic route to an agency's door than the Sexual Offences Act.

What a compliant UK agency has

1. A limited company, with its own bank account and clean accounting. See sole trader or limited company.
2. Written creator contracts: services, commission, term, notice, content ownership, and an exit that a creator can actually use.
3. A written no-meet-ups policy, acknowledged by creators and chatters, and enforced.
4. Chatter contracts that match reality, with the status question answered deliberately rather than by default.
5. UK GDPR documentation: role, DPA, transfer mechanism, access logs, retention.
6. Age and consent records for everyone appearing in content, kept indefinitely.
7. An Online Safety Act position if the agency publishes or hosts anything itself.
8. Transparent creator accounting, with money that belongs to a creator never used as working capital.

In short

Managing creators is lawful in the UK. Sections 52 and 53 of the Sexual Offences Act 2003 are wide, but they are aimed at organising and profiting from in-person sexual services, and a content agency that stays out of arranging contact stays out of their reach. The claims that actually arrive are employment and data claims, and both are cheap to prevent and expensive to lose. Deal with chatter status before someone leaves badly, not after.

This guide is general information, not UK legal advice. We work with agencies and creators on contracts, structuring and compliance, alongside UK-qualified counsel where the question is one of UK criminal or employment law.

Your contactOlivier MaciejewskiFounder of OFM Legal · Former international business lawyer (HEC Paris, Arendt, Clifford Chance) · Official MYM partnerHis background Updated August 19, 2026

This article is general information and does not replace advice tailored to your situation. OFM Legal is not a law firm: court proceedings are handled by our partner lawyers.

Our partners

See all our partners

Read next

Agencies & managersOFM courses: how to chooseRead the article Agencies & managersBecoming an OFM managerRead the article Agencies & managersOnlyFans management contract, agency sideRead the article