The UK Online Safety Act, which received Royal Assent in September 2023, represents one of the most significant pieces of digital legislation in recent years. This act aims to create a safer online environment by placing greater responsibility on service providers to protect users from harmful content.
What Is the UK Online Safety Act?
The Online Safety Act creates a new regulatory framework requiring social media platforms, search engines, and other user-to-user services to take greater responsibility for user safety on their platforms. The Act gives Ofcom, the UK’s communications regulator, extensive powers to oversee and enforce these new rules.
Key provisions of the Act include:
- A duty of care requiring platforms to protect users from illegal content and activity
- Special protections for children, with major platforms needing age verification systems
- Requirements to tackle fraudulent advertising
- Specific protections for women and girls from abusive or misogynistic content
- Transparency requirements about content moderation and enforcement
Who Does It Apply To?
The legislation applies to services:
- With UK users – Whether the service is based in the UK or overseas
- That allow user interaction – Including posting content, sharing with others, or engaging with others
- That host user-generated content – Including forums, comments sections, and reviews
The size of your operation also matters, with tiered obligations depending on whether you’re classified as a Category 1, 2A, or 2B service.
What Actions Should Website Owners Take?
As a website owner or online business operator, you should consider these steps to prepare for compliance:
1. Risk Assessment
Conduct a thorough risk assessment to identify potential harms that could arise from your service, including:
- Illegal content that might appear on your platform
- Content that might be harmful to children
- Your user demographics and vulnerability profiles
2. Implement Safety Systems
Depending on your risk assessment, implement:
- Content moderation processes
- Clear terms of service that prohibit harmful content
- User reporting mechanisms for inappropriate content
- Age verification systems if your service is likely to be accessed by children
3. Documentation
Maintain clear records of:
- Your risk assessment process
- Safety policies and procedures
- Incidents and how they were handled
- Changes and improvements made to your systems
Timeline for Compliance
While the Act has received Royal Assent, not all provisions came into force immediately. Ofcom is developing codes of practice in phases:
- Initial codes focused on illegal content and child protection
- Secondary codes addressing areas like fraudulent advertising and protecting women and girls
Most businesses will have approximately 12-24 months to achieve compliance once relevant codes are published.
Penalties for Non-Compliance
The stakes for non-compliance are high:
- Fines of up to £18 million or 10% of global annual turnover, whichever is higher
- Potential criminal liability for senior managers who fail to comply with information requests
- Possible service restriction or blocking in the UK for serious violations
Balancing Safety and Freedom of Expression
One of the most debated aspects of the Act is its impact on freedom of expression. Critics worry that overzealous content moderation might lead to legitimate speech being suppressed.
The legislation includes provisions requiring “Category 1” services to protect “content of democratic importance” and journalism. However, smaller services should also consider how their moderation policies might impact legitimate discussion.
Conclusion
The UK Online Safety Act represents a significant shift in how online services are regulated, placing the responsibility for user safety firmly with service providers. For website owners and online businesses, understanding and preparing for compliance is essential.
While achieving compliance may require investment in new processes and technologies, the goal of creating a safer online environment is one most users and businesses would agree is worthwhile.
As with any new regulatory framework, the practical application of the Online Safety Act will likely evolve as Ofcom develops detailed guidance and codes of practice. Staying informed about these developments will be key to ensuring ongoing compliance.