The UK Online Safety Act 2025: A New Era of Internet Regulation

Introduction

The UK Online Safety Act 2023 marks one of the most comprehensive attempts by any nation to regulate online content and platform accountability. Enacted on October 26, 2023, and fully enforced starting July 25, 2025, the Act introduces a “duty of care” for online services operating in the UK.

Supported by child advocacy groups like the NSPCC and cautiously endorsed by others such as the Samaritans, the Act aims to make the UK “the safest place in the world to be online.” But with this ambition comes significant controversy particularly around privacy, encryption, and free expression.


What is the Online Safety Act?

The Online Safety Act imposes strict duties on platforms to reduce exposure to illegal and harmful content—especially for children.

Who Must Comply?

The Act applies to:

  • Platforms with a significant number of UK users
  • Services targeting the UK market
  • Sites accessible in the UK that pose a material risk of harm

Covered Services

  • User-to-user platforms (e.g. social media, messaging apps, forums)
  • Search engines

Key Duties

  • Risk Assessments:
    Regular evaluations of algorithmic and design risks related to illegal or harmful content.
  • Content Moderation:
    Platforms must detect and remove illegal material such as:
    • Child Sexual Abuse Material (CSAM)
    • Terrorist content
    • Fraud
    • Harmful content for minors (e.g. self-harm, eating disorders, pornography)
  • Age Verification (Effective July 25, 2025):
    Platforms with adult content must use “highly effective” age assurance technologies like:
    • Facial age estimation
    • Photo ID verification
    • Digital identity wallets
  • Transparency and Reporting:
    • Clear terms of service
    • User-friendly reporting tools
    • Annual transparency reports on content moderation and algorithm impact

Enforcement: The Role of Ofcom

The Office of Communications (Ofcom) is the primary enforcer of the Act. It is empowered to:

  • Impose Fines:
    Up to £18 million or 10% of global annual revenue, whichever is higher
    (e.g. Meta could face up to $16 billion)
  • Restrict Services:
    Seek court orders to block non-compliant platforms or cut off business relationships via payment providers
  • Conduct Investigations:
    Request data, audit companies, and hold senior managers criminally liable for failing to cooperate
  • Issue Codes of Practice:
    • Illegal harms and child safety codes published
    • Public consultations scheduled (Spring 2025) for updating content detection protocols

Progress So Far

As of March 2025, Ofcom:

  • Completed consultations on illegal harms and child safety
  • Laid the illegal harms code before Parliament in December 2024
  • Initiated probes into 11 companies
  • Plans further enforcement against pornography platforms lacking age verification

Support and Criticism

Support

  • NSPCC & IWF (Internet Watch Foundation):
    Praise the Act’s strong stance on child protection and proactive tools like Image Intercept to combat CSAM
  • Families & Advocates:
    The family of Molly Russell, a teen who died after viewing harmful content, sees the law as a long-overdue measure
  • New Criminal Offenses Introduced:
    • Cyberflashing
    • Intimate image abuse
    • Malicious disinformation intended to cause harm

Criticism

  • Privacy Risks:
    • Critics (e.g., EFFCiaran Martin, former NCSC head) argue the law may compromise end-to-end encryption
    • Potential for mass surveillance if private messages are scanned
  • Free Speech Concerns:
    • Groups like Open Rights Group label it a “censor’s charter
    • Vague definitions of “harm” may result in over-moderation
  • Complexity & Overhead:
    • Article 19 calls the Act “complex and incoherent”
    • Molly Rose Foundation says it doesn’t go far enough in addressing depressive content or dangerous online trends
  • Impact on Smaller Services:
    • Rising compliance costs have led some small platforms to shut down
    • Critics fear large tech firms will be able to absorb the burden, deepening industry consolidation

Future Outlook

The Online Safety Act lays the groundwork for a safer digital space, but much will depend on:

  • Ofcom’s ability to enforce the law consistently
  • Public engagement and feedback
  • Industry innovation to meet new standards without violating rights

Technology Secretary Peter Kyle has hinted at further updates—potentially including:

  • Screen time limits
  • Stricter live-streaming rules

Dan Milmo, global technology editor at The Guardian, says the “true test will be whether the online experience becomes safer and more comfortable by mid-2026.”


Conclusion

The UK Online Safety Act 2023 is a major legislative milestone. It reflects growing public demand for accountability from tech platforms—but also exposes deep tensions between digital safety, individual rights, and platform responsibility.

As enforcement begins and further reforms are debated, this law will likely set precedents not only for the UK but for global internet governance.


Sources

Comments

Leave a Reply