← Global Privacy Laws Research Library
2023 c. 50
Online Safety Act 2023
Prepared by Shubhank Suman · Last reviewed
CURRENT (phased commencement)
- Legal character
- Statute
- Region
- Europe
What it covers
The Act defines regulated user-to-user and search services, including services outside the UK with links to the UK. Part 3 imposes duties of care: illegal content risk assessments and safety duties, children's risk assessments and safety duties, content reporting and complaints, freedom of expression and privacy duties, and extra duties for categorised services. It covers pornography providers' age-assurance duties, Ofcom's codes of practice, information powers, fees and enforcement, and creates offences such as false and threatening communications, cyberflashing and sharing intimate images.
Why it matters
It is the UK's main platform-regulation law, with fines up to £18 million or 10% of qualifying worldwide revenue, whichever is greater.
Refer to it when
Use it for duties of online platforms or search services with UK users, age assurance, children's online safety or the online communications offences.
AI, privacy and cybersecurity relevance
- AI: Moderate
- Privacy: Moderate
- Cyber: Low
AI
MODERATE RELEVANCE
Covers AI-generated content and chatbots on regulated services.
Privacy
MODERATE RELEVANCE
Privacy duties and age assurance involve users' personal data.
Cybersecurity
LOW RELEVANCE
Focuses on content harms, not network security.
Applicability
Providers of user-to-user, search and pornography services with links to the UK.
Current validity
CURRENT. Royal Assent 26 October 2023; duties apply in phases as Ofcom codes come into force. Read the official PDF on this page for the operative text.
Read first
Sections 1-5 → Part 3 Chapter 2 (user-to-user duties) → Part 5 → Part 7.
Provisions / sections covered
Part 2 – Key definitions
User-to-user service, search service and regulated service (sections 3-5).
Part 3 – Duties of care
Illegal content and children's safety duties, reporting, complaints and record-keeping.
Part 5 – Pornography providers
Duties to prevent children encountering regulated pornographic content.
Part 7 – Ofcom's powers
Information powers, enforcement and penalties.
Part 10 – Communications offences
False, threatening and intimate-image offences.
Subject-matter tags
- Children's data
- Enforcement and penalties
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- UK GDPR + Data Protection Act 2018: United KingdomFramework · Current (amended)Same jurisdiction; assess applicability separately.
- UK Investigatory Powers Act 2016Law · Current (amended)Same jurisdiction; assess applicability separately.
- UK Computer Misuse Act 1990Law · Current (amended)Same jurisdiction; assess applicability separately.
- Product Security and Telecommunications Infrastructure Act 2022Law · CurrentSame jurisdiction; assess applicability separately.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.