OSA phase two
The OSA is a behemoth piece of legislation with three distinct phases of implementation. The first was completed in mid-March 2025, requiring services to conduct risk assessments and implement safety measures to tackle illegal content. The second phase focuses specifically on content harmful to children – but that is not necessarily illegal.
At the start of 2025, a statement was published by Ofcom, the government's regulatory body for online and offline communications. This outlined requirements for in-scope user-to-user services (where content generated, uploaded, or shared by one user can be seen or "encountered" by another user) and search engines to complete an assessment on the likelihood of children accessing their service by April 2025, conduct risk assessments and implement safety measures by July 2025, and pornography services to introduce age checks by July 2025.
April 2025 also saw the release of Ofcom's Guidance on Content Harmful to Children, which details content that platforms must act against. Included in the highest priority tier of harm is any content that is pornographic or that depicts sexual activity. In its Codes of Practice, Ofcom recommends algorithmic filtering and age verification checks to prevent underage viewers' exposure to adult content.
Pornography isn't the sole focus of the OSA – the highest tier of harm also includes content that promotes suicide, self-harm and eating disorders, which should be filtered and removed entirely. However, placing all explicit content in the highest possible tier of harm, along with the distinct, extensive guidance exclusively focused on it, underscores the preoccupation of legislators and campaigners. Content that depicts or encourages serious violence is ranked lower, at merely priority content. And other content that should concern any parent – promoting conspiracy theories or medical misinformation, for example – doesn't get a look in.
Compliance and enforcement
Failure to comply comes with a hefty price tag. Ofcom has the power to issue fines of up to £18m or 10% of a company's annual global revenue, whichever is higher. For major tech companies, this unprecedented penalty could amount to billions of pounds, and is designed to ensure that even the largest platforms with significant revenue streams outside the UK are held accountable. Severe cases of non-compliance can lead to the government blocking access to the site from the UK, and criminal liability for a company's senior managers and executives.
Read the full opinion piece here.
No comments: