UK Statutory Instrument
2026
United Kingdom
The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2026
At a glance
What's here
6 compliance obligations
Who this Act binds
Business-side actors with duties under this Act, ranked by how often they appear.
- Any Person 3
- Data Controller 1
- Operator 1
- Employer 1
Other Acts binding the same actors
For each actor bound by this Act, the other UK Acts that bind them most often. Useful for understanding the full compliance landscape facing each role.
Any Person also bound by 2337 other Acts (top 5 shown)
- Human Medicines Regulations 2012 2012 169 duties
- Merchant Shipping Act 1995 1995 144 duties
- Insolvency (England and Wales) Rules 2016 2016 101 duties
- Road Traffic Act 1988 1988 95 duties
- Air Navigation Order 2016 2016 95 duties
Data Controllers also bound by 38 other Acts (top 5 shown)
- UK GDPR (retained EU law) 2016 126 duties
- The Town and Country Planning (Entertainment Resort Complex, Bedford) Special Development (No. 2) Order 2025 2025 50 duties
- Data Protection Act 2018 2018 46 duties
- Regulation (EU) 2018/1139 (EASA Basic Regulation) 2018 6 duties
- Commission Delegated Regulation (EU) No 231/2013 of 19 December 2012 supplementing Directive 2011/61/EU of the European Parliament and of the Council with regard to exemptions, general operating conditions, depositaries, leverage, transparency and supervision (Text with EEA relevance) 2013 5 duties
Operators also bound by 730 other Acts (top 5 shown)
- Regulation (EU) No 965/2012 (Air Operations) 2012 138 duties
- Commission Implementing Regulation (EU) 2018/2066 of 19 December 2018 on the monitoring and reporting of greenhouse gas emissions pursuant to Directive 2003/87/EC of the European Parliament and of the Council and amending Commission Regulation (EU) No 601/2012 (Text with EEA relevance) 2018 121 duties
- Commission Regulation (EU) No 601/2012 of 21 June 2012 on the monitoring and reporting of greenhouse gas emissions pursuant to Directive 2003/87/EC of the European Parliament and of the Council (Text with EEA relevance) (repealed) 2012 112 duties
- Space Industry Regulations 2021 2021 75 duties
- Regulation (EU) 2016/429 of the European Parliament and of the Council of 9 March 2016 on transmissible animal diseases and amending and repealing certain acts in the area of animal health (‘Animal Health Law’) (Text with EEA relevance) 2016 66 duties
Employers also bound by 694 other Acts (top 5 shown)
- The Income Tax (Pay As You Earn) Regulations 2003 2003 236 duties
- Provision and Use of Work Equipment Regulations 1998 1998 120 duties
- TULRCA 1992 1992 72 duties
- Employment Rights (Northern Ireland) Order 1996 (current NI employment law) 1996 52 duties
- Income Tax (Earnings and Pensions) Act 2003 2003 50 duties
What this Act requires
Sections that create concrete duties on businesses or carry penalties. Procedural and definitional sections are folded into the “Browse other sections” expander at the bottom of each group. Click any section title to read the source text on legislation.gov.uk.
Schedules
Browse 8 other Schedules — structural / supplementary
The detected CSEA content.
Information about the detected CSEA content— (a) method by which...
Information about the user who has uploaded, created, shared or...
A declaration that all the available information has been provided....
Dates must be provided in number format as DD/MM/YYYY.
Time must be provided in an international format and the...
IP addresses must be formatted as follows—
Reporting duty
- Notify NCA of third-party reporting arrangements and foreign agency changes Operator
Registration with the NCA
- Register with the NCA before submitting CSEA content reports Employer
The organisation administrator, deputy organisation administrator, and authorised persons
- Appoint a main point of contact for reporting child sexual abuse content to the NCA Any Person
Making reports to the NCA
- Report CSEA content to the National Crime Agency Any Person
Retention of data
- Retain CSEA report data for specified periods Any Person
Data protection requirements
- Ensure appropriate security and confidentiality of personal data Data Controller
Browse 3 other sections — procedural / definitional / commencement
Citation, commencement and extent
Interpretation
Requests from the NCA
Explore more
Browse legislation
Find other UK business legislation with related guidance.