UK Act of Parliament 2023 United Kingdom

Online Safety Act 2023

An Act to make provision for and in connection with the regulation by OFCOM of certain internet services; for and in connection with communications offences; and for connected purposes.

Enforced by
Ofcom, BBFC
Status
Amended (in force with amendments)
Penalty ceiling
Imprisonment 18 of 125 obligations carry an unlimited fine. 26 carry different penalties and 81 have no criminal penalty — flagged in the list below.

Does it bind you?

Business-side roles with duties under this instrument.

Any Person78 Director or Officer6 Data Controller1

Plus 40 duties on the regulator, Crown ministers and public bodies — folded into the section list below.

Other Acts binding the same actors

If a role above is yours, these are the other instruments that most often bind it.

Any Person — also bound by 2340 other Acts
Director or Officer — also bound by 429 other Acts
Data Controller — also bound by 35 other Acts

What it requires

Sections creating concrete business duties or carrying penalties, grouped as the instrument is structured. Titles link to the source text — blue means you’re leaving for legislation.gov.uk.

Part 1

Introduction

0 of 2 sections shown
2 other sections in this Part — procedural and definitional
Part 2

Key definitions

0 of 3 sections shown
Part 3

Providers of regulated user-to-user services and regulated search services: duties of care

19 of 58 sections shown
s.007 Providers of user-to-user services: duties of care (opens in a new tab) Regulated
  • Assess and mitigate risks for user-to-user online servicesAny Person
s.009 Illegal content risk assessment duties (opens in a new tab) Regulated
  • Carry out and maintain illegal content risk assessmentsAny Person
s.010 Safety duties about illegal content (opens in a new tab) Regulated
  • Prevent and remove illegal content on your online serviceAny Person
s.011 Children’s risk assessment duties (opens in a new tab) Regulated
  • Assess and report risks to children on your online serviceAny Person
s.012 Safety duties protecting children (opens in a new tab) Regulated
  • Protect children from harmful online content and update terms of serviceAny Person
s.014 Assessment duties: user empowerment (opens in a new tab) Regulated
  • Assess user empowerment for Category 1 online servicesAny Person
s.015 User empowerment duties (opens in a new tab) Regulated
  • Provide adult user empowerment and content control featuresAny Person
s.024 Providers of search services: duties of care (opens in a new tab) Regulated
  • Comply with search service duties of careAny Person
s.026 Illegal content risk assessment duties (opens in a new tab) Regulated
  • Assess illegal content risks for your search serviceAny Person
s.028 Children’s risk assessment duties (opens in a new tab) Regulated
  • Carry out and maintain children’s risk assessments for search servicesAny Person
s.029 Safety duties protecting children (opens in a new tab) Prosecution
  • Protect children from harmful content in search servicesAny Person

Fine up to £18,000,000

s.036 Duties about children’s access assessments (opens in a new tab) Regulated
  • Assess if children are likely to access your online serviceAny Person
s.040 Fraud etc offences (opens in a new tab) Prosecution
  • Commit fraud or related financial offencesAny Person

Unlimited fine

s.041 Codes of practice about duties (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must issue codes of practice for online safety dutiesStatutory regulator
s.046 Publication of codes of practice (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish and update Online Safety codes of practiceStatutory regulator
s.050 Effects of codes of practice (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom and courts must consider codes of practice in legal proceedingsStatutory regulator
s.052 OFCOM’s guidance about certain duties in Part 3 (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on user empowerment and content dutiesStatutory regulator
s.053 OFCOM’s guidance: content that is harmful to children and user empowerment (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • OFCOM must publish guidance on content harmful to childrenStatutory regulator
s.063 Content harmful to children: OFCOM’s review and report (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must review and report on content harmful to childrenStatutory regulator
39 other sections in this Part — procedural and definitional
Part 4

Other duties of providers of regulated user-to-user services and regulated search services

8 of 15 sections shown
s.065 OFCOM’s guidance about user identity verification (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on user identity verificationStatutory regulator
s.066 Requirement to report CSEA content to the NCA (opens in a new tab) Imprisonment
  • Report Child Sexual Exploitation and Abuse (CSEA) content to the NCAAny Person
s.071 Duty not to act against users except in accordance with terms of service (opens in a new tab) Regulated
  • Only moderate or ban users in line with your published terms of serviceAny Person
s.072 Further duties about terms of service (opens in a new tab) Regulated
  • Maintain transparent terms of service and complaint proceduresAny Person
s.073 OFCOM’s guidance about duties set out in sections 71 and 72 (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance for Category 1 online service providersStatutory regulator
s.075 Disclosure of information about use of service by deceased child users (opens in a new tab) Regulated
  • Establish procedures for deceased child users' data requestsAny Person
s.077 Transparency reports about certain Part 3 services (opens in a new tab) Regulated
  • Produce and publish annual online safety transparency reportsAny Person
s.078 OFCOM’s guidance about transparency reports (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish guidance on transparency reporting requirementsStatutory regulator
7 other sections in this Part — procedural and definitional
Part 5

Duties of providers of regulated services: certain pornographic content

3 of 4 sections shown
s.080 Scope of duties about regulated provider pornographic content (opens in a new tab) Regulated
  • Protect UK users from pornographic content on your internet serviceAny Person
s.081 Duties about regulated provider pornographic content (opens in a new tab) Regulated
  • Use effective age verification for pornographic contentAny Person
s.082 OFCOM’s guidance about duties set out in section 81 (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on age verification for pornographic contentStatutory regulator
1 other section in this Part — procedural and definitional
Part 6

Duties of providers of regulated services: fees

1 of 8 sections shown
Part 7

OFCOM's powers and duties in relation to regulated services

73 of 77 sections shown
s.095 Register of categories of certain Part 3 services (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must establish and publish a register of high-risk online servicesStatutory regulator
s.096 Duty to maintain register (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must maintain and update the register of regulated online servicesStatutory regulator
s.097 List of emerging Category 1 services (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must identify and list 'emerging' Category 1 servicesStatutory regulator
s.098 OFCOM’s register of risks, and risk profiles, of Part 3 services (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must maintain a register of risks and risk profiles for online servicesStatutory regulator
s.099 OFCOM’s guidance about risk assessments (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on carrying out risk assessmentsStatutory regulator
s.103 Requirement to name a senior manager (opens in a new tab) Regulated
  • Name a senior manager in response to an Ofcom information noticeAny Person

amended 2 times (opens in a new tab)

s.104 Reports by skilled persons (opens in a new tab) Regulated
  • Cooperate with and pay for 'skilled person' reportsAny Person

amended 7 times (opens in a new tab)

s.105 Investigations (opens in a new tab) Regulated
  • Cooperate fully with Ofcom investigationsAny Person

amended 2 times (opens in a new tab)

s.109 Offences in connection with information notices (opens in a new tab) Imprisonment
  • Fail to comply with an information noticeAny Person
  • Fail to comply with information notice or provide false/encrypted informationAny Person

2 years imprisonment · amended 5 times (opens in a new tab)

s.110 Senior managers’ liability: information offences (opens in a new tab) Regulated
  • Senior manager failing to prevent information offenceAny Person

amended 4 times (opens in a new tab)

s.111 Offences in connection with notices under Schedule 12 (opens in a new tab) Regulated
  • Fail to comply with audit noticeAny Person
  • Fail to comply with Ofcom audit notice or supply false informationAny Person

amended 2 times (opens in a new tab)

s.112 Other information offences (opens in a new tab) Regulated
  • Obstruct, fail to comply or give false information to regulatorAny Person
  • Obstruct or fail to comply with Ofcom information powersAny Person

amended 2 times (opens in a new tab)

s.113 Penalties for information offences (opens in a new tab) Imprisonment
  • Commit an information offence under the Online Safety ActAny Person
  • Fail to comply with Ofcom information requirements (serious offences)Any Person

2 years imprisonment · amended 4 times (opens in a new tab)

s.116 Intelligence service information (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must protect intelligence service information from disclosureStatutory regulator

amended 1 time (opens in a new tab)

s.123 Warning notices (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must issue a warning notice before ordering content technology useStatutory regulator

amended 2 times (opens in a new tab)

s.125 Notices under section 121 (1) : supplementary (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must include required content in technology notices under section 121Statutory regulator

amended 2 times (opens in a new tab)

s.127 OFCOM’s guidance about functions under this Chapter (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on its Online Safety Act functionsStatutory regulator

amended 3 times (opens in a new tab)

s.128 OFCOM’s annual report (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish annual reports on online safety functions and technologyStatutory regulator

amended 2 times (opens in a new tab)

s.139 Penalty for failure to comply with confirmation decision (opens in a new tab) Prosecution
  • Fail to comply with Ofcom confirmation decisionAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.140 Penalty for failure to comply with notice under section 121 (1) (opens in a new tab) Prosecution
  • Fail to comply with Ofcom notice on terrorism or child sexual abuse contentAny Person
  • Fail to comply with OFCOM notice under the Online Safety ActAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.142 Information to be included in notices under sections 140 and 141 (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide detailed reasons and rights when proposing or issuing finesStatutory regulator

amended 2 times (opens in a new tab)

s.143 Amount of penalties etc (opens in a new tab) Prosecution
  • Breach of online safety or information dutiesAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.148 Interaction with other action by OFCOM (opens in a new tab) Regulated
  • Fail to comply with OFCOM enforcement action (business disruption order context)Any Person

amended 2 times (opens in a new tab)

s.149 Publication by OFCOM of details of enforcement action (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish details of enforcement actions taken against businessesStatutory regulator

amended 2 times (opens in a new tab)

s.150 Publication by providers of details of enforcement action (opens in a new tab) Regulated
  • Fail to comply with an enforcement publication noticeAny Person

amended 2 times (opens in a new tab)

s.151 OFCOM’s guidance about enforcement action (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish guidance on online safety enforcementStatutory regulator

amended 2 times (opens in a new tab)

s.152 Advisory committee on disinformation and misinformation (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must establish an advisory committee on disinformationStatutory regulator

amended 2 times (opens in a new tab)

s.154 Information for research about online safety matters

amended 2 times

s.156 OFCOM’s statement about freedom of expression and privacy (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must report on freedom of expression and privacy protectionsStatutory regulator

amended 2 times (opens in a new tab)

s.159 OFCOM’s transparency reports (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish annual transparency reports on online safetyStatutory regulator

amended 2 times (opens in a new tab)

s.160 OFCOM’s report about reporting and complaints procedures (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • OFCOM must report on online providers' reporting and complaints proceduresStatutory regulator

amended 2 times (opens in a new tab)

s.161 OFCOM’s report about use of app stores by children (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must report on children's safety and age assurance in app storesStatutory regulator

amended 2 times (opens in a new tab)

s.163 OFCOM’s report in connection with investigation into a death (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom may report on platform safety following a death investigationStatutory regulator

amended 2 times (opens in a new tab)

4 other sections in this Part — procedural and definitional
Part 8

Appeals and super-complaints

5 of 5 sections shown
Part 9

Secretary of State's functions in relation to regulated services

7 of 7 sections shown
Part 10

Communications offences

13 of 13 sections shown
s.179 False communications offence (opens in a new tab) Imprisonment
  • Send a false communication causing harmAny Person
  • Send false online message intending harmAny Person

51 weeks imprisonment · amended 2 times (opens in a new tab)

s.181 Threatening communications offence (opens in a new tab) Imprisonment
  • Send threatening communicationsAny Person
  • Send threatening message (death or serious harm)Any Person

5 years imprisonment · amended 2 times (opens in a new tab)

s.183 Offences of sending or showing flashing images electronically (opens in a new tab) Imprisonment
  • Send or display flashing images that could cause seizuresAny Person
  • Send or show flashing images to harm someone with epilepsyAny Person

5 years imprisonment · amended 2 times (opens in a new tab)

s.184 Offence of encouraging or assisting serious self-harm (opens in a new tab) Imprisonment
  • Encourage or assist serious self-harmAny Person

5 years imprisonment · amended 2 times (opens in a new tab)

s.186 Liability of corporate officers (opens in a new tab) Regulated
  • Corporate officer liability for online safety offencesDirector or Officer
  • Officer liable for corporate online‑safety offencesDirector or Officer

amended 2 times (opens in a new tab)

s.187 Sending etc photograph or film of genitals (opens in a new tab) Prosecution
  • Send intimate genital image causing alarm or for sexual gratificationAny Person
  • Send non-consensual explicit images or videosAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.188 Sharing or threatening to share intimate photograph or film (opens in a new tab) Imprisonment
  • Share or threaten to share intimate images without consentAny Person

2 years imprisonment · amended 2 times (opens in a new tab)

Part 11

Supplementary and general

37 of 37 sections shown
s.193 OFCOM’s guidance about illegal content judgements (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must provide guidance on identifying illegal contentStatutory regulator

amended 4 times (opens in a new tab)

s.194 Time for publishing first guidance under certain provisions of this Act (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish first online safety guidance within 18 monthsStatutory regulator

amended 1 time (opens in a new tab)

s.195 Providers that are not legal persons (opens in a new tab) Prosecution
  • Liability for online safety fines for non-corporate providersAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.196 Individuals providing regulated services: liability (opens in a new tab) Prosecution
  • Joint personal liability for online safety breachesAny Person

Unlimited fine · amended 2 times (opens in a new tab)

s.200 Offence of failure to comply with confirmation decision: supplementary (opens in a new tab) Imprisonment
  • Fail to comply with an Ofcom confirmation decisionAny Person

2 years imprisonment · amended 4 times (opens in a new tab)

s.202 Liability of corporate officers for offences (opens in a new tab) Prosecution
  • Corporate officers liable for company's Online Safety Act offencesDirector or Officer
  • Personal liability for directors and officers for company safety breachesDirector or Officer

Unlimited fine · amended 4 times (opens in a new tab)

s.203 Application of offences to providers that are not legal persons (opens in a new tab) Imprisonment
  • Liability for unincorporated providers and their officersDirector or Officer

2 years imprisonment · amended 4 times (opens in a new tab)

s.205 Offences: extra-territorial application and jurisdiction (opens in a new tab) Imprisonment
  • Violate online safety laws from outside the UKDirector or Officer

2 years imprisonment · amended 4 times (opens in a new tab)

s.207 Publication by OFCOM (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must publish information in a way that reaches affected partiesStatutory regulator

amended 1 time (opens in a new tab)

s.214 Power to require providers of internet services to prevent or restrict access by children to internet services

amended 1 time

s.216 Power to amend Act in relation to illegal AI-generated content etc

amended 2 times

s.217 Power to impose duties about pornographic content

amended 4 times

Part 12

Interpretation and final provisions

16 of 16 sections shown
Schedules

Schedules

33 of 342 shown
s.004 Codes of practice under section 41: principles, objectives, content (opens in a new tab) Regulated
Other duties (1) — Crown / regulator
  • Ofcom must follow specific principles and objectives when drafting safety codesStatutory regulator
s.sch003 Part 3 services already in operation at the outset of the regime provided for by this Act Regulated
  • Complete first illegal content and children's access risk assessments on timeAny Person
s.sch003 Section 15(2) assessments Regulated
  • Complete Section 15(2) risk assessment within 3 months of guidanceAny Person
s.sch003 Illegal content risk assessments and children’s access assessments of Part 4B part Regulated
  • Complete first illegal content risk assessment and children's access assessment within deadlinesAny Person
s.sch003 If, on the assessment start day, illegal content risk assessment... Regulated
  • Complete illegal content risk assessment and CAA within 3 monthsAny Person
s.sch003 Section 15(2) assessments of Part 4B part Regulated
  • Complete Part 4B risk assessment within 3 months of guidanceAny Person
s.sch003 New Part 3 services which start up, and existing services which become Part 3 services, between publication of the first illegal content risk assessment guidance and the first CAA guidance Regulated
  • Complete illegal content risk assessment and CAA within deadlinesAny Person
s.sch003 New Part 3 services which start up when illegal content risk assessment guidance and CAA guidance are both available Regulated
  • Complete first illegal content risk assessment and CAA within 3 months of launchAny Person
s.sch003 Existing services which become Part 3 services when illegal content risk assessment guidance and CAA guidance are both available Regulated
  • Complete illegal content risk assessment and CAA within 3 months of becoming a Part 3 serviceAny Person
s.sch003 Children’s risk assessments Regulated
  • Complete children's risk assessment within 3 monthsAny Person
s.sch003 Section 15(2) assessments Regulated
  • Complete section 15(2) risk assessment within 3 months of becoming Category 1Data Controller
s.sch004 Online safety objectives Regulated
Other duties (1) — Crown / regulator
  • Ofcom: ensure code measures align with online safety objectivesStatutory regulator
s.sch006 An offence under section 2 of the Obscene Publications Act... Regulated
  • Publish obscene material encouraging specified serious offencesAny Person
s.sch006 An offence under either of the following provisions of the... Prosecution
  • Possess or distribute indecent images of childrenAny Person

Unlimited fine

s.sch006 Inchoate offences Regulated
  • Attempt or conspire to commit a listed offence under the Online Safety ActAny Person
s.sch006 An offence under section 160 of the Criminal Justice Act... Prosecution
  • Possess indecent images of a childAny Person

Unlimited fine

s.sch006 An offence under any of the following provisions of the... Prosecution
  • Commit serious child sexual offencesAny Person

Unlimited fine

s.sch006 Inchoate offences Regulated
  • Attempt or conspire to commit an online safety offenceAny Person
s.sch007 An offence under any of the following provisions of the... Prosecution
  • Engage in threatening or abusive behaviour or stalking onlineAny Person

Unlimited fine

s.sch007 An offence under section 5 of the Psychoactive Substances Act... Regulated
  • Supply or offer to supply a psychoactive substanceAny Person
s.sch007 An offence under any of the following provisions of the... Prosecution
  • Breach firearms licence and trading rulesAny Person

Unlimited fine

s.sch007 An offence under any of the following provisions of the... Prosecution
  • Sell offensive weapons or knives to under-18sAny Person

Unlimited fine

s.sch007 An offence under any of the following provisions of the... Regulated
  • Use or sell air weapons without a certificate (Scotland)Any Person
s.sch007 An offence under section 1 of the Human Trafficking and... Prosecution
  • Engage in human trafficking (Scotland)Any Person

Unlimited fine

s.sch007 An offence under section 2 of the Human Trafficking and... Prosecution
  • Engage in human traffickingAny Person

Unlimited fine

s.sch007 An offence under any of the following provisions of the... Regulated
  • Make misleading statements or create misleading impressionsAny Person
s.sch007 Inchoate offences Regulated
  • Attempt, conspire, or assist a Schedule 7 offenceAny Person
s.sch008 When determining which information to require in a notice under... Regulated
Other duties (1) — Crown / regulator
  • Ofcom must consider service characteristics when deciding what information to require in a noticeStatutory regulator
s.sch011 Regulations specifying threshold conditions for categories of Part 3 services Regulated
Other duties (1) — Crown / regulator
  • Secretary of State must set threshold conditions for online service categoriesCrown / Minister / Government department
s.sch011 Procedure for amending or replacing regulations under paragraph 1 Regulated
Other duties (1) — Crown / regulator
  • OFCOM must research and publish advice before threshold regulations are changedStatutory regulator
s.sch012 Offences Prosecution
  • Obstruct Ofcom officers or provide false informationAny Person

Unlimited fine

s.sch015 Liability of controlling individuals for failures by entities Prosecution
  • Fail to comply with regulatory notice as controlling individualAny Person

Unlimited fine

s.sch017 (1) This paragraph applies in relation to a person who... Regulated
  • Include qualifying revenue breakdown for Part 4B services in OFCOM notificationAny Person
309 other schedules
s.sch001 Email services
s.sch001 Services provided by persons providing education or childcare
s.sch001 Interpretation
s.sch001 England
s.sch001 Early years provision by a person registered under Chapter 2...
s.sch001 Later years childminding by a later years childminder registered under...
s.sch001 Later years provision by a person registered under Chapter 3...
s.sch001 Education or childcare in a maintained nursery school within the...
s.sch001 Education or childcare in— (a) an Academy school, within the...
s.sch001 Education in— (a) an institution in England within the further...
s.sch001 Education provided by an independent training provider.
s.sch001 SMS and MMS services
s.sch001 Further education for persons under 19 provided by a local...
s.sch001 In paragraphs 12 to 15, “early years childminding”, “early years...
s.sch001 In paragraph 19, “independent training provider” means a provider—
s.sch001 In paragraphs 20 and 22, “local authority in England” has...
s.sch001 In paragraph 22— “combined authority” means a combined authority established...
s.sch001 Scotland
s.sch001 Child minding, within the meaning of Part 5 of the...
s.sch001 Day care of children, within the meaning of Part 5...
s.sch001 Primary education, secondary education or childcare in—
s.sch001 Further education provided by a body listed under the heading...
s.sch001 Services offering only one-to-one live aural communications
s.sch001 Further education provided by a college of further education which...
s.sch001 Wales
s.sch001 Day care for children by a person who is registered...
s.sch001 Primary education, secondary education or childcare in a school in...
s.sch001 Education provided in accordance with section 19A of the Education...
s.sch001 Further education in an institution in Wales within the further...
s.sch001 (1) Any further education or training in Wales that is—...
s.sch001 In paragraphs 31 and 32, “child minding” and “day care...
s.sch001 Northern Ireland
s.sch001 Pre-school education, within the meaning of Part 5 of the...
s.sch001 Limited functionality services
s.sch001 Education in a nursery school, within the meaning of the...
s.sch001 Education or childcare in a school, within the meaning of...
s.sch001 Education which is suitable education otherwise than at school provided...
s.sch001 Education in an institution of further education, within the meaning...
s.sch001 Education in agriculture and related subjects.
s.sch001 The following definitions apply for the purposes of this Schedule....
s.sch001 “Childcare”— (a) in relation to provision in England, has same...
s.sch001 “Education”— (a) in relation to provision in England, Wales and...
s.sch001 “Education in agriculture and related subjects”, in relation to provision...
s.sch001 “Further education”— (a) in relation to provision in England and...
s.sch001 Services which enable combinations of user-generated content
s.sch001 “Higher education”— (a) in relation to provision in England and...
s.sch001 “Primary education” and “secondary education”— (a) in relation to provision...
s.sch001 Exception to exemptions in paragraphs 1 to 5
s.sch001 Internal business services (entire user-to-user service or search service)
s.sch001 Internal business services (part of user-to-user service or search service)
s.sch001 Services provided by public bodies
s.sch002 A user-to-user service described in any of paragraphs 1 to...
s.sch002 (1) A user-to-user service within sub-paragraph (2) or (3).
s.sch002 (1) A search service within sub-paragraph (2).
s.sch002 For the purposes of this Schedule, a service “has links...
s.sch002 In this Schedule— “the internal business service conditions” means the...
s.sch003 Any reference in this Part to the effect of Part...
s.sch003 Application of paragraphs 12 to 14
s.sch003 Illegal content risk assessments and children’s access assessments
s.sch003 If, on the assessment start day, illegal content risk assessment...
s.sch003 Application of paragraphs 16 to 20
s.sch003 Application of Part 1 and paragraph 6
s.sch003 Application of paragraph 5
s.sch003 Interpretation of this Schedule
s.sch003 For the meaning of “likely to be accessed by children”,...
s.sch003 In relation to regulated user-to-user services (or in the case...
s.sch003 In relation to regulated search services and the search engine...
s.sch003 In relation to regulated user-to-user services (or in the case...
s.sch003 In relation to regulated search services and the search engine...
s.sch003 For the purposes of this Schedule, guidance of a particular...
s.sch003 Extension of three-month periods
s.sch003 Interpretation of this Part
s.sch003 (1) In this Part, “assessment start day”, in relation to...
s.sch003 In this Part “video-sharing platform service” has the same meaning...
s.sch004 General principles
s.sch004 (1) Measures described in a code of practice which are...
s.sch004 Measures described in a code of practice may relate only...
s.sch004 Content of codes of practice: age assurance
s.sch004 Content of codes of practice: proactive technology
s.sch004 General
s.sch004 A code of practice may apply in relation to a...
s.sch004 Interpretation
s.sch004 The principles are as follows— (a) providers of Part 3...
s.sch004 The online safety objectives for regulated user-to-user services are as...
s.sch004 The online safety objectives for regulated search services are as...
s.sch004 In the case of a combined service—
s.sch004 The Secretary of State may by regulations amend paragraph 4...
s.sch004 If regulations are made amending the online safety objectives, OFCOM...
s.sch004 Content of codes of practice
s.sch005 An offence under any of the following provisions of the...
s.sch005 An offence under section 113 of the Anti-terrorism, Crime and...
s.sch005 An offence under any of the following provisions of the...
s.sch005 Inchoate offences
s.sch006 An offence under any of the following provisions of the...
s.sch006 An offence under any of the following provisions of the...
s.sch006 An offence under section 1 of the Protection of Children...
s.sch006 An offence under Article 3 of the Protection of Children...
s.sch006 An offence under any of the following provisions of the...
s.sch006 An offence under section 62 of the Coroners and Justice...
s.sch006 An offence under section 69 of the Serious Crime Act...
s.sch007 Assisting suicide
s.sch007 An offence under section 76 of the Serious Crime Act...
s.sch007 Drugs and psychoactive substances
s.sch007 Firearms and other weapons
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under section 13 of the Criminal Justice Act...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under section 36(1)(c) or (d) of the Violent...
s.sch007 Assisting illegal immigration
s.sch007 Human trafficking
s.sch007 Sexual exploitation
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under section 63 of the Criminal Justice and...
s.sch007 Encouraging or assisting serious self-harm
s.sch007 Threats to kill
s.sch007 An offence under section 33 of the Criminal Justice and...
s.sch007 An offence under section 2 of the Abusive Behaviour and...
s.sch007 Proceeds of crime
s.sch007 Fraud
s.sch007 An offence under section 49(3) of the Criminal Justice and...
s.sch007 Financial services
s.sch007 Foreign interference
s.sch007 Animal welfare
s.sch007 Public order offences, harassment, stalking and fear or provocation of violence
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under section 50A of the Criminal Law (Consolidation)...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under any of the following provisions of the...
s.sch007 An offence under any of the following provisions of the...
s.sch008 The incidence of illegal content, content that is harmful to...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 Arrangements that a provider has in place for the reporting...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 The systems and processes by which a provider assesses the...
s.sch008 The systems and processes that a provider operates—
s.sch008 Co-operation by a provider with government, regulatory or other public...
s.sch008 Measures taken or in use by a provider to provide...
s.sch008 Measures taken or in use by a provider to improve...
s.sch008 The dissemination of illegal content, content that is harmful to...
s.sch008 Any other measures taken or in use by a provider...
s.sch008 The incidence of illegal search content and search content that...
s.sch008 The number of users who are assumed to have encountered...
s.sch008 The formulation, development, scope and application of the statements of...
s.sch008 The systems and processes for users to report search content...
s.sch008 The systems and processes that a provider operates to deal...
s.sch008 Functionalities designed to help users manage risks relating to search...
s.sch008 The design and operation of algorithms which affect the display,...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 Arrangements that a provider has in place for the reporting...
s.sch008 The number of users who are assumed to have encountered...
s.sch008 Measures taken or in use by a provider to comply...
s.sch008 The systems and processes by which a provider assesses the...
s.sch008 The systems and processes that a provider operates—
s.sch008 Co-operation by a provider with government, regulatory or other public...
s.sch008 Measures taken or in use by a provider to provide...
s.sch008 Measures taken or in use by a provider to improve...
s.sch008 Any other measures taken or in use by a provider...
s.sch008 The Secretary of State may by regulations—
s.sch008 The Secretary of State must consult OFCOM before making regulations...
s.sch008 The formulation, development, scope and application of the terms of...
s.sch008 In the application of Part 2 of this Schedule to...
s.sch008 (1) For the purposes of this Schedule, content of a...
s.sch008 In this Schedule— “consumer content” has the same meaning as...
s.sch008 The systems and processes for users to report content which...
s.sch008 The systems and processes that a provider operates to deal...
s.sch008 Functionalities designed to help users manage risks relating to content...
s.sch008 Features, including functionalities, that a provider considers may contribute to...
s.sch008 The design and operation of algorithms which affect the display,...
s.sch009 Internal business services (entire internet service)
s.sch009 Internal business services (part of internet service)
s.sch009 Services provided by public bodies
s.sch009 Services provided by persons providing education or childcare
s.sch009 On-demand programme services and non-UK on-demand programme services that are Tier 1 services (entire internet service)
s.sch009 On-demand programme services and non-UK on-demand programme services that are Tier 1 services (part of internet service)
s.sch009 Interpretation
s.sch010 Recovery of initial costs
s.sch010 Recovery of initial costs: first phase
s.sch010 Further recovery of initial costs
s.sch010 End of the recovery process
s.sch010 Providers for part of a year only
s.sch010 Calculation of the recoverable amount
s.sch010 Regulations about recovery of initial costs
s.sch010 Interpretation
s.sch011 Procedure for first regulations under paragraph 1
s.sch011 Publication of OFCOM’s advice under paragraphs 2 and 3
s.sch011 Interpretation
s.sch011 In this Schedule the “characteristics” of a user-to-user part of...
s.sch011 In this Schedule— “content that is harmful to children” has...
s.sch012 Authorised persons
s.sch012 Entry and search under a warrant must be within the...
s.sch012 An authorised person executing a warrant may take such other...
s.sch012 A person taken on to the premises under paragraph 11...
s.sch012 An authorised person may use reasonable force, if necessary, for...
s.sch012 A warrant authorises entry on one occasion only, unless it...
s.sch012 If the premises are unoccupied or the occupier is temporarily...
s.sch012 Return of warrants
s.sch012 Restrictions on powers
s.sch012 Interpretation
s.sch012 Power of entry and inspection without a warrant
s.sch012 References in this Schedule to a person “acting under this...
s.sch012 In this Schedule “enforceable requirement” has the same meaning as...
s.sch012 In paragraphs 6 to 17 and 20 “warrant” means a...
s.sch012 In the application of paragraph 5(1) to Scotland, the reference...
s.sch012 In the application of paragraph 5(1) to Northern Ireland, the...
s.sch012 Notice requiring information, documents or tests at inspection
s.sch012 Audit
s.sch012 Conditions for issue of a warrant
s.sch012 Evidence of authority
s.sch012 Powers exercisable by warrant
s.sch012 Powers of seizure: supplementary
s.sch012 Further provision about executing warrants
s.sch013 Meaning of “penalty” in this Schedule
s.sch013 Amount of penalties: principles
s.sch013 Limitation to type and amount of penalties previously proposed
s.sch013 Maximum amount of penalties
s.sch013 Maximum amount of penalties: group of entities
s.sch013 Recovery of penalties
s.sch014 Football Spectators Act 1989
s.sch014 Criminal Attempts and Conspiracy (Northern Ireland) Order 1983 (S.I. 1983/1120 (N.I. 13))
s.sch014 Armed Forces Act 2006
s.sch014 Serious Crime Act 2007
s.sch014 Children and Young Persons Act 1933
s.sch014 Police and Criminal Evidence Act 1984
s.sch014 Sexual Offences (Amendment) Act 1992
s.sch014 Sexual Offences Act 2003
s.sch014 Criminal Justice Act 2003
s.sch014 Anti-social Behaviour, Crime and Policing Act 2014
s.sch014 Modern Slavery Act 2015
s.sch014 Sexual Offences Act 2003
s.sch014 Sentencing Act 2020
s.sch014 Elections Act 2022
s.sch014 Criminal Justice and Courts Act 2015
s.sch014 Domestic Abuse Act 2021
s.sch014 Overseas Operations (Service Personnel and Veterans) Act 2021
s.sch014 Criminal Justice (Electronic Commerce) (Amendment) (EU Exit) Regulations 2021 (S.I. 2021/835)
s.sch014 In Schedule 5 to the Sexual Offences Act 2003, in...
s.sch014 Regulatory Enforcement and Sanctions Act 2008
s.sch014 Elections Act 2022
s.sch014 Children and Young Persons Act 1933
s.sch014 Visiting Forces Act 1952
s.sch014 Children and Young Persons Act (Northern Ireland) 1968 (c. 34 (N.I.))
s.sch014 Criminal Attempts Act 1981
s.sch015 Joint provisional notices of contravention
s.sch015 Liability of parent entities for failures by subsidiary entities
s.sch015 Liability of subsidiary entities for failures by parent entities
s.sch015 Liability of fellow subsidiary entities for failures by subsidiary entities
s.sch015 OFCOM’s guidance
s.sch015 Interpretation
s.sch015 In its application for the purposes of this Schedule, paragraph...
s.sch015 For the purposes of this Schedule, sections 1161(4) and 1162...
s.sch016 Part 4B of the Communications Act (video-sharing platform services) is...
s.sch016 In section 368U (maintenance of list of providers)—
s.sch016 In section 368V(4) (meaning of “significant differences”), for the words...
s.sch016 In section 368Y(2)(d) (information to be provided by providers of...
s.sch016 In section 368Z1(3) (duty to take appropriate measures), for the...
s.sch016 In section 368Z10(3)(a) (power to demand information), for the words...
s.sch016 For section 368Z12 (co-operation with member States and the European...
s.sch017 (1) In this Schedule, “pre-existing Part 4B service” means—
s.sch017 Operation of section 368U of the Communications Act
s.sch017 Video-sharing platform services which start up, or start up again, during the transitional period
s.sch017 (1) Sub-paragraph (2) applies in relation to a pre-existing Part...
s.sch017 Paragraphs 11 and 12 apply regardless of whether, or when,...
s.sch017 Introduction
s.sch017 In this Part “relevant regulated service” means—
s.sch017 Application of section 83
s.sch017 Application of section 84: transitional charging year
s.sch017 (1) If a person who is the provider of a...
s.sch017 In this Schedule— “the relevant day”, in relation to a...
s.sch017 Application of section 84: non-transitional charging year
s.sch017 Amounts wholly referable to relevant Part 4B service
s.sch017 Interpretation of this Part
s.sch017 For the purposes of this Part a charging year is...
s.sch017 (1) In this Part “exempt provider” means a person within...
s.sch017 In this Part the following terms have the same meaning...
s.sch017 Interpretation of this Part
s.sch017 For the purposes of this Part an investigation relating to...
s.sch017 OFCOM as appropriate regulatory authority
s.sch017 Duties of service providers to co-operate with investigations
s.sch017 Pre-existing Part 4B services which are regulated user-to-user services
s.sch017 Demands for information, and enforcement of such demands
s.sch017 Enforcement notifications, financial penalties etc
s.sch017 Suspension or restriction of service for contraventions or failures
s.sch017 Regulated user-to-user services that include regulated provider pornographic content
s.sch017 Pre-existing Part 4B services which form part of regulated user-to-user services
s.sch017 Regulated user-to-user services with a Part 4B part and another user-to-user part
s.sch017 Regulated user-to-user services with a Part 4B part and a search engine
s.sch017 Regulated user-to-user services with a Part 4B part but no other user-to-user part or search engine
s.sch017 Assessments of pre-existing Part 4B services or of services which include a pre-existing Part 4B service

Help complying

Guvnor’s practical routes through this instrument.

Comply with the Online Safety Act from scratch

A complete learning path for platform operators new to the Online Safety Act 2023. Covers understanding the Act, determining scope and platform …

Start using AI responsibly in your business

End-to-end learning path for businesses adopting AI: understanding the regulatory landscape, assessing obligations, setting up governance, managing specific risks around data, bias, …

AI compliance quick check

Rapid AI compliance self-assessment: identify AI systems, map to regulators, flag critical obligations, confirm key safeguards in place.

Online Safety Act compliance quick check

Rapid compliance self-assessment for experienced operators: confirm scope, verify risk assessments, check content moderation, terms of service, complaints, age assurance, and Ofcom …

Respond to an Ofcom investigation

What to do when Ofcom takes enforcement action against your online service under the Online Safety Act 2023. Covers identifying the type …

Responding to an AI regulatory investigation

What to do when a UK regulator investigates your AI system: ICO enforcement, FCA investigation, EHRC inquiry, CMA review. Covers immediate steps, …

Age verification for online services

How to implement age verification to comply with the Online Safety Act and ICO Children's Code. Covers verification methods, pornography requirements, privacy …

Children's safety duties under the Online Safety Act

Comprehensive guide to the children's safety duties under the Online Safety Act 2023. Covers what triggers the duties, risk assessment by age …

Conduct a children's access assessment

Step-by-step guide to assessing whether children are likely to access your online service under the Online Safety Act 2023. Covers the legal …

Conduct an illegal content risk assessment

Step-by-step guide to conducting the mandatory illegal content risk assessment under the Online Safety Act 2023. Covers how to identify risks from …

Implement age assurance on your platform

Practical guide to implementing age assurance on your online platform. Covers choosing between age verification and estimation, evaluating providers, privacy-preserving approaches, the …

Online Safety Act compliance checklist

Quick-check verification of your Online Safety Act compliance status. Covers scope assessment, risk assessments, content moderation, terms of service, complaints, age assurance, …

Online Safety Act penalties and enforcement powers

Quick reference to Ofcom's enforcement powers, penalty calculations, and senior manager criminal liability under the Online Safety Act 2023.

Online Safety Act: duties for online services

How to comply with the Online Safety Act 2023 if you operate a user-to-user service or search service. Covers service categories, illegal …

13 more guides that reference this instrument

Duty extraction and severity labels are Guvnor’s analysis of the instrument, not the instrument itself. Always verify against the linked source text.