Accountability Cannot Stop at the Performer

A Platform's Permission Is Not Legal Permission

One of the most dangerous assumptions in international digital commerce is that because a platform permits something, the activity must be lawful.

That assumption is particularly risky in adult livestreaming.

A performer may complete identity verification. The performer may be approved. The account may be activated. The platform may allow nudity or explicit sexual performances. The performer may begin receiving payments.

Nothing in that sequence necessarily establishes that the conduct is lawful where the performer is physically located.

Consider the differences between national laws.

In India, section 67A of the Information Technology Act criminalizes qualifying electronic publication or transmission of material containing sexually explicit acts or conduct. A first conviction can result in imprisonment of up to five years, and a subsequent conviction can reach seven years. (indiacode.nic.in)

In Russia, Article 242 of the Criminal Code can apply to qualifying unlawful production, distribution or public demonstration of pornographic materials, and aggravated provisions specifically address use of information and telecommunications networks, including the Internet. Qualifying aggravated conduct can carry two to six years' imprisonment.

In the Philippines, the Cybercrime Prevention Act expressly defines an offence of “cybersex” involving qualifying lascivious exhibition of sexual organs or sexual activity through a computer system for favour or consideration. (lawphil.net)

Chinese law contains serious criminal offences concerning production, dissemination and commercial distribution of pornography, with penalties escalating dramatically in serious cases.

Other jurisdictions regulate the activity differently.

A consenting adult performing lawful adult entertainment from Canada, for example, does not necessarily face the same criminal-law problem merely because the broadcast is sexually explicit.

The global interface may be identical. The legal consequences are not.

That should immediately raise an accountability question.

If a commercial platform verifies a performer, activates that performer for monetized adult broadcasting and operates internationally, what exactly has it done to determine whether the activity it is enabling is lawful in the jurisdiction from which the performer is actually broadcasting?

And what exactly has the performer been told?

“Comply With Local Law” Is Not Legal Education

“ The platform provides the system, controls the rules, facilitates the money and profits from the transaction—but the performer alone is expected to identify every criminal law that may apply.

It is easy for platforms to transfer responsibility through Terms of Service.

A lengthy agreement can state that users must comply with every applicable local, provincial, state, national and international law.

That may establish a contractual obligation. It does not establish meaningful understanding.

Consider what a performer would actually need to know.

A performer in India may need to understand section 67A.

A performer physically in Russia may need to understand the potential application of Article 242 to Internet-based distribution or public demonstration.

A performer in the Philippines may need to understand that the country's cybercrime legislation specifically addresses commercial cybersex.

A performer travelling between countries may need to understand that an activity permitted in yesterday's location may have a different legal character after crossing a border.

None of this is intuitive.

“Obey the law” is not an explanation of the law.

It is particularly weak as a safety mechanism when the business itself is built around facilitating the very activity whose legality changes according to geography.

There is an obvious asymmetry here.

The platform may have lawyers, compliance teams, trust-and-safety personnel, identity-verification systems, technical logs, payment infrastructure and the ability to restrict activity by jurisdiction.

The individual performer may have none of those things.

Yet the legal-risk allocation can effectively become:

The platform provides the system, controls the rules, facilitates the money and profits from the transaction—but the performer alone is expected to identify every criminal law that may apply.

That allocation deserves critical examination.

The Second Risk Is Even Larger: What Happens During the Stream

Suppose the adult livestream itself is perfectly lawful.

The legal problem does not disappear.

A webcam is still a communication system.

A livestream can become the medium through which harassment, threats, stalking, disclosure of personal information or non-consensual intimate imagery occurs.

And national criminal laws increasingly recognize exactly that reality.

Australia now has an express federal doxxing offence. Section 474.17C of the Criminal Code addresses qualifying publication or distribution of another person's personal data using a carriage service in circumstances reasonable persons would regard as menacing or harassing. The maximum penalty is six years' imprisonment.

France criminalizes certain dangerous disclosures of information enabling another person to be identified or located where the statutory intention and risk requirements are present. Its online-harassment law also expressly recognizes electronic communication as an aggravating circumstance.

Germany criminalizes specified dangerous dissemination of personal data. German criminal law also contains an offence of insult, illustrating how behaviour treated principally as rude or offensive in one jurisdiction can have an entirely different legal character elsewhere.

Canada's Criminal Code provides a maximum of ten years on indictment for criminal harassment under section 264 where the statutory elements are established.

New Zealand's Harmful Digital Communications Act creates a specific criminal offence for certain digital communications intentionally causing serious harm.

Kenya's cyber-harassment legislation provides penalties that can reach ten years' imprisonment in qualifying cases.

Brazil, Mexico, Canada, New Zealand, South Africa and numerous other jurisdictions criminalize different forms of non-consensual dissemination of intimate imagery.

This does not mean that saying another person's first name is automatically doxxing.

It does not mean an insulting gesture is automatically criminal harassment.

It does not mean that every privacy complaint establishes an offence.

A responsible analysis must examine the elements of the relevant statute: intent, repetition, consent, the nature of the information, foreseeable risk, actual harm, knowledge and context.

But that nuance actually strengthens the case for platform accountability.

Because if these distinctions are legally complicated for lawyers, regulators and courts, how realistic is it to assume that every performer understands them merely because they clicked “I agree”?

Platform Accountability Should Begin Before Something Goes Wrong

Too much discussion of platform safety begins after an incident.

A complaint is filed. Content is reviewed. Someone asks whether a rule was violated.

But accountability should begin much earlier.

The first question should be whether the platform has designed the environment responsibly.

Where a business facilitates potentially regulated conduct across many countries, a serious compliance system should be capable of answering basic questions:

• Does it determine the performer's actual broadcasting jurisdiction?
• Does it distinguish nationality from physical location?
• Does it identify jurisdictions where the underlying activity creates unusually high criminal risk?
• Does it provide meaningful warnings?
• Are those warnings understandable in the performer's language?
• Does it distinguish platform rules from criminal law?
• Does it explain that certain privacy, harassment, threats and intimate-image conduct can result not merely in suspension but in police investigation and imprisonment?
• And does it retain evidence showing what the performer was actually told?

These questions are not asking the platform to become a law school.

They are asking whether a company facilitating a legally sensitive international activity has built even a basic system for communicating foreseeable serious risks.

The Responsibility Increases With Control

Not every website has the same responsibilities.

A passive technical intermediary is different from a platform that actively structures the relationship between performers and viewers.

Accountability should therefore follow actual control.

A service's position becomes materially different where it does some combination of the following:

• verifies the identities or ages of performers;
• authorizes who may broadcast;
• sets the rules governing performances;
• provides the streaming technology;
• controls accounts;
• monitors or moderates content;
• facilitates interaction between viewers and performers;
• processes or facilitates compensation;
• receives complaints;
• retains technical records;
• issues warnings;
• suspends accounts;
• and permanently removes performers.

• The platformVerifies performers, sets the rules, moves the money, and can intervene.
  ›
• The performerBears personal legal risk, often without counsel, logs, or jurisdictional tools.
  ›
• Competent authoritiesInvestigate crimes and apply the law a platform must not pretend to decide.
  ›

The more control the platform exercises over the environment, the less persuasive it becomes to characterize every serious safety issue as solely a dispute between two users.

Control creates the ability to prevent harm.

Control creates access to evidence.

Control creates the ability to intervene.

And where control is combined with commercial benefit, accountability becomes difficult to dismiss as somebody else's problem.

This Does Not Mean Platforms Are Automatically Liable for User Crimes

“ Did the platform operate a reasonable safety, compliance and decision-making system proportionate to the risks inherent in the service it chose to operate?

That distinction must be made clearly.

A platform should not automatically be held criminally or civilly responsible for every unlawful thing a user does.

The Internet could not function under such a simplistic rule.

The European Union's Digital Services Act itself preserves conditional intermediary-liability protections and expressly states that intermediaries cannot be subjected to a general obligation to monitor everything users transmit or store.

The real issue is more precise.

The question is not:

Did the platform itself commit the user's offence?

The question is:

Did the platform operate a reasonable safety, compliance and decision-making system proportionate to the risks inherent in the service it chose to operate?

Modern regulation is increasingly moving toward exactly this systems-based approach.

Regulators Are Already Moving Beyond “We Are Just a Platform”

The development of online-safety legislation is significant because governments are increasingly regulating the systems platforms build, rather than focusing only on the individual piece of unlawful content.

The United Kingdom provides a strong example.

Under the Online Safety Act framework, regulated user-to-user services must conduct illegal-content risk assessments, take proportionate measures to manage identified risks, act against illegal content when they become aware of it, maintain reporting mechanisms and complaints procedures, and keep relevant records. Ofcom expressly describes governance, accountability, moderation, reporting and complaints as components of these duties.

Importantly for this sector, Ofcom specifically states that regulated user-to-user services can include cam, fan and tube sites.

That matters.

It reflects a regulatory recognition that adult-content platforms cannot necessarily distance themselves from systemic safety questions merely by arguing that the underlying content was produced by users.

The UK model asks what measures the service itself has implemented.

It asks about risk.

It asks about governance.

It asks about complaints.

It asks what happens when the platform becomes aware of illegal content.

That is platform accountability.

The European Union Goes Further on Procedural Accountability

The EU Digital Services Act provides another important model.

It does not impose universal liability for everything users say.

Instead, it establishes structured due-diligence obligations.

Hosting providers must maintain accessible mechanisms through which people can notify them of specific allegedly illegal content.

The DSA requires transparency reporting concerning moderation activity, notices received, action taken, complaints and—in relevant cases—automated moderation.

It also imposes reason-giving requirements for specified moderation decisions and creates complaint mechanisms for online platforms.

This is important because accountability is not only about whether a platform removes content.

It is also about whether anyone can understand how the platform reached its decision.

The principles are closely related to broader legal ideas of justification, transparency, intelligibility and reviewability: an affected person should be able to identify the issue considered, material factual basis, standard applied and reasoning leading to the result.

“We Reviewed It” Is Not Meaningful Accountability

“ We reviewed your complaint and found no violation.

A common weakness in private moderation is the unexplained decision.

A person submits a detailed complaint. Evidence is attached. Dates and times are provided. Specific conduct is identified.

The response says:

“We reviewed your complaint and found no violation.”

What exactly has been communicated?

The outcome. Nothing more.

The complainant may still have no idea:

• what footage was reviewed;
• whether the correct incident was located;
• whether chat records were examined;
• whether earlier complaints were considered;
• which policy provision was applied;
• whether the reported conduct was factually confirmed;
• whether the conduct occurred but was considered permissible;
• whether insufficient evidence existed;
• or whether the complaint was misunderstood entirely.

That creates a fundamental accountability problem.

The issue is not that every private company's decision must resemble a 40-page judicial ruling.

The issue is that a decision affecting safety should contain enough information for a reasonable person to understand the path from complaint to conclusion.

Otherwise “investigation” becomes functionally unverifiable.

Platform Accountability Is Not Satisfied by Having a Report Button

A report button is an intake mechanism. It is not an accountability system.

Real accountability requires a chain:

report → preservation → assessment → evidence → applicable standard → finding → decision → reasons → review → escalation where necessary.

A failure at any stage can fundamentally alter the outcome.

If the relevant livestream is not preserved, the investigation may become impossible.

If the reviewer examines only one isolated moment rather than the alleged repeated conduct, the wrong issue may be decided.

If material evidence is not considered, the decision may be incomplete.

If the platform does not explain its conclusion, neither the complainant nor an independent reviewer can determine what actually happened.

And if appeal simply generates the same unexplained template, there may be no meaningful review at all.

Calling that process “Trust & Safety” does not make it accountable.

Accountability must be demonstrated through the process itself.

Evidence Preservation Is Particularly Important for Livestreaming

Livestreaming presents a problem that ordinary social media does not always create.

The evidence can disappear.

An offensive social-media post may remain online for days. A livestream incident may exist for seconds.

If the platform does not preserve relevant footage, chat messages, moderation history and account records after receiving a serious complaint, the most important evidence may be lost before police, regulators, courts or even the platform's own appeal reviewer can examine it.

This makes evidence preservation a central safety issue.

It is not necessary for a platform to store everything forever. That would raise its own privacy and data-protection concerns.

But once a sufficiently particularized serious complaint has been received, a responsible system should have a mechanism for preserving relevant evidence for an appropriate period consistent with applicable law.

Otherwise the person with greatest technical ability to preserve the evidence can simultaneously disclaim responsibility while allowing the evidence necessary for external accountability to disappear.

That is a serious structural weakness.

Repeat Complaints Change the Accountability Analysis

One incident can be ambiguous. Repeated reports are different.

A platform should not presume that repetition establishes guilt.

But a competent safety system should be capable of recognizing patterns.

If the same performer repeatedly attracts substantially similar privacy or harassment complaints, that history becomes relevant to risk assessment.

If the performer has previously been warned, awareness changes.

If substantially similar conduct continues after specific notice, the platform's own response should logically evolve.

A system that evaluates every incident in total isolation may fail to identify exactly the kind of pattern that harassment and stalking laws themselves often recognize.

Platform architecture should not create institutional amnesia.

Appeal Must Mean More Than a Second Automated Response

Appeal is another area where the appearance of accountability can differ from the reality.

A platform may say that users have a right to appeal.

But the meaningful questions are:

• Was the original evidence reconsidered?
• Could new evidence be submitted?
• Did another qualified reviewer examine the matter?
• Did the appeal address the alleged error?
• Were reasons provided?
• Could the appeal correct a factual mistake?
• Or did the user simply receive another standardized message repeating the original conclusion?

An appeal mechanism that cannot meaningfully reconsider the decision is an appeal in name only.

This is one reason regulatory systems increasingly focus upon complaint architecture rather than simply whether a contact form exists.

Australia Shows Why External Oversight Matters

“ A private platform should ordinarily have the opportunity to resolve a safety issue—but there must be a point at which an independent authority can examine whether the platform's response was adequate.

Australia's eSafety framework illustrates another important accountability concept.

For qualifying adult cyber abuse, a person ordinarily living in Australia can first report the harmful material to the service and subsequently seek eSafety intervention where statutory criteria are met.

The regulator can make informal requests and, where appropriate, issue formal removal notices to the responsible individual or the service/platform.

This model recognizes a basic reality:

A private platform should ordinarily have the opportunity to resolve a safety issue—but there must be a point at which an independent authority can examine whether the platform's response was adequate.

Without external review, the entity whose conduct is being questioned can become the final judge of its own accountability.

A Global Platform Cannot Have Global Revenue and Local Ignorance

This is perhaps the most important principle.

Digital companies deliberately benefit from scale.

A platform can recruit internationally. It can serve viewers internationally. It can process international payments. It can create one global marketplace.

Scale is one of its greatest commercial advantages.

But legal complexity is the other side of that same scale.

A business should not be permitted, as an accountability principle, to treat international reach as an advantage when earning revenue but as somebody else's problem when legal risk appears.

If a platform chooses to facilitate sensitive activity across jurisdictions, some degree of jurisdictional compliance complexity is part of the business it has chosen to operate.

That does not require perfection. It requires a credible system.

The Platform Often Knows More Than the Person It Tells to “Know the Law”

“ You are responsible.

There is also an uncomfortable information imbalance.

A performer may not know: which law governs a transmission; how a jurisdiction defines publication; what constitutes criminal harassment; whether a name qualifies as protected personal data; whether an intimate image can legally be redistributed; or whether commercial sexually explicit transmission itself is restricted.

Meanwhile, a sophisticated platform may possess: legal counsel; compliance personnel; country-level usage data; identity information; payment information; moderation systems; policy databases; technical location indicators; and the ability to implement jurisdiction-specific restrictions.

Where that imbalance exists, simply placing the entire burden on the individual user deserves criticism.

It is not enough for the party with the greater institutional capacity to write:

“You are responsible.”

Accountability asks what that institution itself did with the knowledge and control it possessed.

Platforms Should Not Need a Criminal Conviction Before Taking Safety Seriously

“ We have no responsibility until a court convicts somebody.

Another weak accountability model requires the complainant to prove a crime before the platform treats the conduct as serious.

That misunderstands the different roles of platforms and courts.

A platform does not need to declare somebody criminally guilty. It should not. That is a judicial function.

But a platform can determine that conduct violates its safety rules. It can preserve evidence. It can restrict further disclosure. It can warn the performer. It can prevent contact. It can escalate internally. It can respond to lawful requests from competent authorities. And it can identify patterns of repeated behaviour.

There is a large space between:

“We have convicted the user of a crime”

and

“We have no responsibility until a court convicts somebody.”

Responsible safety systems operate in that space.

Accountability Also Protects Performers

Platform accountability should not be understood as anti-performer.

It can protect performers just as much as viewers.

A performer may themselves be subject to: stalking; extortion; recording without consent; doxxing; threats; harassment; non-consensual redistribution; or coercion.

A weak complaint system harms everyone.

A performer who is not told that their local law may criminalize the activity is also potentially being placed at risk.

A performer who unknowingly crosses a legal boundary can face consequences far more serious than losing an account.

And a performer falsely accused of wrongdoing benefits from a transparent investigative process capable of identifying what actually happened.

Accountability is therefore not synonymous with punishment.

It is the mechanism that separates allegation from evidence and evidence from conclusion.

What Real Platform Accountability Should Look Like

“ Platform accountability is moving from promises about safety toward evidence of systems that actually produce safety.

A credible international platform accountability system should therefore connect three stages.

Before broadcasting, the platform should identify foreseeable jurisdictional risks, provide meaningful legal and safety education and distinguish general platform rules from serious legal consequences.

During operation, it should maintain proportionate moderation, user-reporting mechanisms, appropriate safeguards, pattern detection and clear behavioural standards.

After a serious complaint, it should preserve material evidence, investigate the actual allegation, apply an identifiable standard, provide an intelligible decision, permit meaningful review and cooperate appropriately with competent authorities.

That is not an impossible standard.

Increasingly, elements of it are becoming regulatory expectations.

The UK Online Safety Act requires regulated services to assess risks and maintain proportionate systems and complaints mechanisms.

The EU Digital Services Act creates notice-and-action, transparency and procedural accountability obligations while carefully preserving intermediary protections and rejecting a universal general-monitoring requirement.

Australia's eSafety regime creates external escalation mechanisms when qualifying harmful online material is not adequately resolved at platform level.

These regimes differ substantially.

But the direction is increasingly clear:

Platform accountability is moving from promises about safety toward evidence of systems that actually produce safety.

• Before broadcastingIdentify jurisdictional risk, educate, and separate platform rules from criminal law.
• During operationModerate proportionately, take reports, detect patterns, and keep clear standards.
• After a serious complaintPreserve evidence, investigate the allegation, explain the decision, and allow review.
• Evidence of systemsSafety is shown by systems that produce it, not by promises alone.

Terms of Service Cannot Be the End of Accountability

Terms remain important. Users have responsibilities. Performers have responsibilities. Viewers have responsibilities.

A person's own unlawful conduct cannot simply be transferred to the website through which it occurred.

But contractual responsibility and institutional accountability can coexist.

A performer may be personally responsible for criminal harassment. At the same time, a platform may have failed to respond adequately to repeated warning signs.

A user may unlawfully distribute an intimate image. At the same time, a platform may have failed to operate a reasonable reporting or removal system.

A performer may broadcast unlawful content. At the same time, a platform may reasonably be asked why its verification process permitted monetized broadcasting from a jurisdiction it knew—or should have identified as presenting serious restrictions—without meaningful warning.

These are not mutually exclusive conclusions.

Responsibility can exist at different layers.

Accountability Means Being Able to Answer the Question “Why?”

A powerful accountability test is remarkably simple.

When a platform makes a serious safety decision, can it answer:

• What exactly did you review?
• What evidence did you have?
• What rule did you apply?
• What did you find happened?
• Why did that finding lead to this outcome?
• What happened to evidence that may later be needed?
• Could somebody meaningfully challenge your conclusion?

1. What was reviewedWhich footage, messages, and history were actually examined.
2. What evidenceThe records the finding relied on, and what was not available.
3. What rule and findingThe standard applied, and what the reviewer found happened.
4. Why and reviewWhy that finding produced this outcome, and how it can be challenged.

If a sophisticated global platform cannot answer those questions, the problem is larger than one complaint.

It suggests that the institution may possess enormous private decision-making power without the corresponding transparency necessary to scrutinize how that power is exercised.

The Accountability Gap

The most serious risk arises when responsibility becomes fragmented.

• The performer says: “The platform allowed me.”
• The platform says: “The performer is responsible for local law.”
• The hosting provider says: “We provide infrastructure.”
• The registrar says: “This is not within our abuse remit.”
• One regulator says: “The company is elsewhere.”
• Another says: “The individual is elsewhere.”

Everyone may have a technically defensible explanation for the boundary of their responsibility.

Yet the harmful conduct may never receive meaningful examination.

That is an accountability gap.

And it is precisely why the platform—the entity controlling the immediate environment in which the interaction occurred—has such an important role.

It may not be the court. It may not be the police. It may not ultimately determine the criminal law.

But it is often the institution best positioned to: preserve what happened; identify who participated; apply immediate safeguards; prevent repetition; maintain relevant records; and provide the first meaningful decision.

That role carries accountability with it.

Conclusion: Profit, Control and Accountability Cannot Be Separated

“ The greater an organization's control over a risky environment, the greater the justification required when it chooses how—or whether—to exercise that control.

Global adult livestreaming platforms should not be expected to prevent every unlawful act. They should not be expected to predict every crime. They should not act as criminal courts. And they should not automatically be legally responsible for everything their users do.

But those limitations should not become excuses for institutional passivity.

A platform that chooses to verify performers, provide streaming infrastructure, facilitate monetization, establish behavioural rules, moderate interaction, receive complaints and exercise the power to suspend or terminate accounts is not a neutral spectator to the environment it created.

It is an active institutional participant.

And where that environment operates across jurisdictions in which the same conduct can range from lawful activity to an offence punishable by years of imprisonment, accountability cannot reasonably stop with a clause telling the performer to know the law.

The platform should be able to demonstrate:

• that it understands the significant risks inherent in its service;
• that performers receive meaningful warnings about those risks;
• that safety rules address foreseeable harmful conduct;
• that serious complaints result in genuine investigation;
• that ephemeral evidence is appropriately preserved;
• that repeated conduct is capable of being recognized;
• that decisions are intelligible;
• and that meaningful escalation exists when internal systems fail.

This is not about demanding censorship. It is not about presuming criminality. It is not about shifting every user's individual responsibility to a corporation.

It is about recognizing a basic principle of institutional accountability:

The greater an organization's control over a risky environment, the greater the justification required when it chooses how—or whether—to exercise that control.

The Internet may distribute responsibility. It should not allow responsibility to disappear.

And a platform cannot credibly claim the benefits of being global while treating the predictable legal and safety consequences of that global reach as entirely someone else's problem.