Legislation – Online Safety Act 2023

New Search

Introduction

PART 1
Introduction

1 Introduction

2 Overview of Act

PART 2
Key definitions

3 “User-to-user service” and “search service”

4 “Regulated service”, “Part 3 service” etc

5 Disapplication of Act to certain parts of services

PART 3
Providers of regulated user-to-user services and regulated search services: duties of care

CHAPTER 1 Introduction

6 Overview of Part 3

CHAPTER 2 Providers of user-to-user services: duties of care

User-to-user services: which duties apply, and scope of duties

7 Providers of user-to-user services: duties of care

8 Scope of duties of care

Illegal content duties for user-to-user services

9 Illegal content risk assessment duties

10 Safety duties about illegal content

User-to-user services likely to be accessed by children

11 Children’s risk assessment duties

12 Safety duties protecting children

13 Safety duties protecting children: interpretation

Category 1 services

14 Assessment duties: user empowerment

15 User empowerment duties

16 User empowerment duties: interpretation

17 Duties to protect content of democratic importance

18 Duties to protect news publisher content

19 Duties to protect journalistic content

Duties about content reporting and complaints procedures

20 Duty about content reporting

21 Duties about complaints procedures

Cross-cutting duties

22 Duties about freedom of expression and privacy

23 Record-keeping and review duties

CHAPTER 3 Providers of search services: duties of care

Search services: which duties apply, and scope of duties

24 Providers of search services: duties of care

25 Scope of duties of care

Illegal content duties for search services

26 Illegal content risk assessment duties

27 Safety duties about illegal content

Search services likely to be accessed by children

28 Children’s risk assessment duties

29 Safety duties protecting children

30 Safety duties protecting children: interpretation

Duties about content reporting and complaints procedures

31 Duty about content reporting

32 Duties about complaints procedures

Cross-cutting duties

33 Duties about freedom of expression and privacy

34 Record-keeping and review duties

CHAPTER 4 Children’s access assessments

35 Children’s access assessments

36 Duties about children’s access assessments

37 Meaning of “likely to be accessed by children”

CHAPTER 5 Duties about fraudulent advertising

38 Duties about fraudulent advertising: Category 1 services

39 Duties about fraudulent advertising: Category 2A services

40 Fraud etc offences

CHAPTER 6 Codes of practice and guidance

Codes of practice

41 Codes of practice about duties

42 Codes of practice: principles, objectives, content

43 Procedure for issuing codes of practice

44 Secretary of State’s powers of direction

45 Procedure for issuing codes of practice following direction under section 44

46 Publication of codes of practice

47 Review of codes of practice

48 Minor amendments of codes of practice

49 Relationship between duties and codes of practice

50 Effects of codes of practice

51 Duties and the first codes of practice

Guidance

52 OFCOM’s guidance about certain duties in Part 3

53 OFCOM’s guidance: content that is harmful to children and user empowerment

54 OFCOM’s guidance about protecting women and girls

CHAPTER 7 Interpretation of Part 3

55 “Regulated user-generated content”, “user-generated content”, “news publisher content”

56 “Recognised news publisher”

57 “Search content”, “search results” etc

58 Restricting users’ access to content

59 “Illegal content” etc

60 “Content that is harmful to children”

61 “Primary priority content that is harmful to children”

62 “Priority content that is harmful to children”

63 Content harmful to children: OFCOM’s review and report

PART 4
Other duties of providers of regulated user-to-user services and regulated search services

CHAPTER 1 User identity verification

64 User identity verification

65 OFCOM’s guidance about user identity verification

CHAPTER 2 Reporting child sexual exploitation and abuse content

66 Requirement to report CSEA content to the NCA

67 Regulations about reports to the NCA

68 NCA: information sharing

69 Offence in relation to CSEA reporting

70 Interpretation of this Chapter

CHAPTER 3 Terms of service: transparency, accountability and freedom of expression

71 Duty not to act against users except in accordance with terms of service

72 Further duties about terms of service

73 OFCOM’s guidance about duties set out in sections 71 and 72

74 Interpretation of this Chapter

CHAPTER 4 Deceased Child Users

75 Disclosure of information about use of service by deceased child users

76 OFCOM’s guidance about duties set out in section 75

CHAPTER 5 Transparency reporting

77 Transparency reports about certain Part 3 services

78 OFCOM’s guidance about transparency reports

PART 5
Duties of providers of regulated services: certain pornographic content

79 “Provider pornographic content” and “regulated provider pornographic content”

80 Scope of duties about regulated provider pornographic content

81 Duties about regulated provider pornographic content

82 OFCOM’s guidance about duties set out in section 81

PART 6
Duties of providers of regulated services: fees

83 Duty to notify OFCOM

84 Duty to pay fees

85 Regulations by OFCOM about qualifying worldwide revenue etc

86 Threshold figure

87 Secretary of State’s guidance about fees

88 OFCOM’s fees statements

89 Recovery of OFCOM’s initial costs

90 Meaning of “charging year” and “initial charging year”

PART 7
OFCOM’s powers and duties in relation to regulated services

CHAPTER 1 General duties

91 General duties of OFCOM under section 3 of the Communications Act

92 Duties in relation to strategic priorities

93 Duty to carry out impact assessments

CHAPTER 2 Register of categories of regulated user-to-user services and regulated search services

94 Meaning of threshold conditions etc

95 Register of categories of certain Part 3 services

96 Duty to maintain register

97 List of emerging Category 1 services

CHAPTER 3 Risk assessments of regulated user-to-user services and regulated search services

98 OFCOM’s register of risks, and risk profiles, of Part 3 services

99 OFCOM’s guidance about risk assessments

CHAPTER 4 Information

Information powers and information notices

100 Power to require information

101 Information in connection with an investigation into the death of a child

102 Information notices

103 Requirement to name a senior manager

Skilled persons’ reports

104 Reports by skilled persons

Investigations and interviews

105 Investigations

106 Power to require interviews

Powers of entry, inspection and audit

107 Powers of entry, inspection and audit

108 Amendment of Criminal Justice and Police Act 2001

Information offences and penalties

109 Offences in connection with information notices

110 Senior managers’ liability: information offences

111 Offences in connection with notices under Schedule 12

112 Other information offences

113 Penalties for information offences

Disclosure of information

114 Co-operation and disclosure of information: overseas regulators

115 Disclosure of information

116 Intelligence service information

117 Provision of information to the Secretary of State

118 Amendment of Enterprise Act 2002

119 Information for users of regulated services

120 Admissibility of statements

CHAPTER 5 Regulated user-to-user services and regulated search services: notices to deal with terrorism content and CSEA content

121 Notices to deal with terrorism content or CSEA content (or both)

122 Requirement to obtain skilled person’s report

123 Warning notices

124 Matters relevant to a decision to give a notice under section 121(1)

125 Notices under section 121(1): supplementary

126 Review and further notice under section 121(1)

127 OFCOM’s guidance about functions under this Chapter

128 OFCOM’s annual report

129 Interpretation of this Chapter

CHAPTER 6 Enforcement powers

Provisional notices and confirmation decisions

130 Provisional notice of contravention

131 Requirements enforceable by OFCOM against providers of regulated services

132 Confirmation decisions

133 Confirmation decisions: requirements to take steps

134 Confirmation decisions: risk assessments

135 Confirmation decisions: children’s access assessments

136 Confirmation decisions: proactive technology

137 Confirmation decisions: penalties

138 Confirmation decisions: offences

Penalty notices etc

139 Penalty for failure to comply with confirmation decision

140 Penalty for failure to comply with notice under section 121(1)

141 Non-payment of fee

142 Information to be included in notices under sections 140 and 141

Amount of penalties etc

143 Amount of penalties etc

Business disruption measures

144 Service restriction orders

145 Interim service restriction orders

146 Access restriction orders

147 Interim access restriction orders

148 Interaction with other action by OFCOM

Publication of enforcement action

149 Publication by OFCOM of details of enforcement action

150 Publication by providers of details of enforcement action

Guidance

151 OFCOM’s guidance about enforcement action

CHAPTER 7 Committees, research and reports

152 Advisory committee on disinformation and misinformation

153 Functions of the Content Board

154 Research about users’ experiences of regulated services

154A Information for research about online safety matters

155 Consumer consultation

156 OFCOM’s statement about freedom of expression and privacy

157 OFCOM’s reports about use of age assurance

158 OFCOM’s reports about news publisher content and journalistic content

159 OFCOM’s transparency reports

160 OFCOM’s report about reporting and complaints procedures

161 OFCOM’s report about use of app stores by children

162 OFCOM’s report about researchers’ access to information

163 OFCOM’s report in connection with investigation into a death

164 OFCOM’s reports

CHAPTER 8 Media literacy

165 Media literacy

166 Media literacy strategy and media literacy statement

PART 8
Appeals and super-complaints

CHAPTER 1 Appeals

167 Appeals against OFCOM decisions relating to the register under section 95

168 Appeals against OFCOM notices

CHAPTER 2 Super-complaints

169 Power to make super-complaints

170 Procedure for super-complaints

171 OFCOM’s guidance about super-complaints

PART 9
Secretary of State’s functions in relation to regulated services

172 Statement of strategic priorities

173 Consultation and parliamentary procedure

174 Directions about advisory committees

175 Directions in special circumstances

176 Secretary of State’s guidance

177 Annual report on the Secretary of State’s functions

178 Review

PART 10
Communications offences

179 False communications offence

180 Exemptions from offence under section 179

181 Threatening communications offence

182 Interpretation of sections 179 to 181

183 Offences of sending or showing flashing images electronically

184 Offence of encouraging or assisting serious self-harm

185 Extra-territorial application and jurisdiction

186 Liability of corporate officers

187 Sending etc photograph or film of genitals

188 Sharing or threatening to share intimate photograph or film

189 Repeals in connection with offences under sections 179 and 181

190 Repeals in connection with offences under section 188

191 Consequential amendments

PART 11
Supplementary and general

192 Providers’ judgements about the status of content

193 OFCOM’s guidance about illegal content judgements

194 Time for publishing first guidance under certain provisions of this Act

195 Providers that are not legal persons

196 Individuals providing regulated services: liability

197 Liability of parent entities etc

198 Former providers of regulated services

199 Information offences: supplementary

200 Offence of failure to comply with confirmation decision: supplementary

201 Defences

202 Liability of corporate officers for offences

203 Application of offences to providers that are not legal persons

204 Extra-territorial application

205 Offences: extra-territorial application and jurisdiction

206 Payment of sums into the Consolidated Fund

207 Publication by OFCOM

208 Service of notices

209 Amendments of Part 4B of the Communications Act

210 Repeal of Part 4B of the Communications Act

211 Repeal of Part 4B of the Communications Act: transitional provision etc

212 Repeals: Digital Economy Act 2017

213 Offence under the Obscene Publications Act 1959: OFCOM defence

214 Offences regarding indecent photographs of children: OFCOM defence

215 Power to regulate app stores

216 Power to regulate app stores: supplementary

217 Power to impose duty about alternative dispute resolution procedure

218 Power to amend section 40

219 Powers to amend sections 61 and 62

220 Powers to amend or repeal provisions relating to exempt content or services

221 Powers to amend Part 2 of Schedule 1

222 Powers to amend Schedules 5, 6 and 7

223 Power to make consequential provision

224 Regulations: general

225 Parliamentary procedure for regulations

PART 12
Interpretation and final provisions

226 “Provider” of internet service

227 “User”, “United Kingdom user” and “interested person”

228 “Internet service”

229 “Search engine”

230 “Age verification” and “age estimation”

231 “Proactive technology”

232 Content communicated “publicly” or “privately”

233 “Functionality”

234 “Harm” etc

235 “Online safety functions” and “online safety matters”

236 Interpretation: general

237 Index of defined terms

238 Financial provisions

239 Extent

240 Commencement and transitional provision

241 Short title

SCHEDULES

SCHEDULE 1 Exempt user-to-user and search services

SCHEDULE 2 User-to-user services and search services that include regulated provider pornographic content

SCHEDULE 3 Timing of providers’ assessments

SCHEDULE 4 Codes of practice under section 41: principles, objectives, content

SCHEDULE 5 Terrorism offences

SCHEDULE 6 Child sexual exploitation and abuse offences

SCHEDULE 7 Priority offences

SCHEDULE 8 Transparency reports by providers of Category 1 services, Category 2A services and Category 2B services

SCHEDULE 9 Certain internet services not subject to duties relating to regulated provider pornographic content

SCHEDULE 10 Recovery of OFCOM’s initial costs

SCHEDULE 11 Categories of regulated user-to-user services and regulated search services: regulations

SCHEDULE 12 OFCOM’s powers of entry, inspection and audit

SCHEDULE 13 Penalties imposed by OFCOM under Chapter 6 of Part 7

SCHEDULE 14 Amendments consequential on offences in Part 10 of this Act

SCHEDULE 15 Liability of parent entities etc

SCHEDULE 16 Amendments of Part 4B of the Communications Act

SCHEDULE 17 Video-sharing platform services: transitional provision etc

Changes to legislation:

There are currently no known outstanding effects for the Online Safety Act 2023, SCHEDULE 11. Help about Changes to Legislation

Close

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

SCHEDULES

SCHEDULE 11Categories of regulated user-to-user services and regulated search services: regulations

Section 94

Regulations specifying threshold conditions for categories of Part 3 services

1

(1)

The Secretary of State must make regulations specifying conditions (“Category 1 threshold conditions”) for the user-to-user part of regulated user-to-user services relating to each of the following—

(a)

number of users of the user-to-user part of the service,

(b)

functionalities of that part of the service, and

(c)

any other characteristics of that part of the service or factors relating to that part of the service that the Secretary of State considers relevant.

(2)

The Secretary of State must make regulations specifying conditions (“Category 2A threshold conditions”) for the search engine of regulated search services and combined services relating to each of the following—

(a)

number of users of the search engine, and

(b)

any other characteristics of the search engine or factors relating to the search engine that the Secretary of State considers relevant.

(3)

The Secretary of State must make regulations specifying conditions (“Category 2B threshold conditions”) for the user-to-user part of regulated user-to-user services relating to each of the following—

(a)

number of users of the user-to-user part of the service,

(b)

functionalities of that part of the service, and

(c)

any other characteristics of that part of the service or factors relating to that part of the service that the Secretary of State considers relevant.

(4)

Regulations under this paragraph must specify the way or ways in which the relevant threshold conditions may be met, and that may be by meeting the conditions in any specified combination, subject to the rule that—

(a)

in relation to the Category 1 threshold conditions and the Category 2B threshold conditions, at least one specified condition about number of users or functionality must be met, and

(b)

in relation to the Category 2A threshold conditions, at least one specified condition about number of users must be met.

(5)

In making regulations under sub-paragraph (1), the Secretary of State must take into account the likely impact of the number of users of the user-to-user part of the service, and its functionalities, on how easily, quickly and widely regulated user-generated content is disseminated by means of the service.

(6)

In making regulations under sub-paragraph (2), the Secretary of State must take into account the likely impact of the number of users of the search engine on the level of risk of harm to individuals from search content that is illegal content or search content that is harmful to children.

(7)

In making regulations under sub-paragraph (3), the Secretary of State must take into account the likely impact of the number of users of the user-to-user part of the service, and its functionalities, on the level of risk of harm to individuals from illegal content and content that is harmful to children disseminated by means of the service.

(8)

In this paragraph “specified” means specified in the regulations.

Annotations:
Commencement Information

I1Sch. 11 para. 1 in force at Royal Assent, see s. 240(4)(p)

Procedure for first regulations under paragraph 1

2

(1)

This paragraph describes the procedure that must be followed in relation to the making of the first regulations under each of sub-paragraphs (1), (2) and (3) of paragraph 1.

(2)

In the case of regulations under paragraph 1(1), within the period of six months beginning with the day on which this Act is passed, OFCOM must carry out research into—

(a)

how easily, quickly and widely regulated user-generated content is disseminated by means of regulated user-to-user services,

(b)

the number of users and functionalities of the user-to-user part of such services, and

(c)

such other characteristics of that part of such services or factors relating to that part of such services as OFCOM consider to be relevant to specifying the Category 1 threshold conditions.

(3)

In the case of regulations under paragraph 1(2), within the period of six months beginning with the day on which this Act is passed, OFCOM must carry out research into the following aspects of the search engine of regulated search services and combined services—

(a)

the prevalence of search content that is illegal content and search content that is harmful to children,

(b)

the number of users of the search engine, and

(c)

such other characteristics or factors as OFCOM consider to be relevant to specifying the Category 2A threshold conditions.

(4)

In the case of regulations under paragraph 1(3), within the period of six months beginning with the day on which this Act is passed, OFCOM must carry out research into—

(a)

the dissemination of illegal content and content that is harmful to children by means of regulated user-to-user services,

(b)

the number of users and functionalities of the user-to-user part of such services, and

(c)

such other characteristics of that part of such services or factors relating to that part of such services as OFCOM consider to be relevant to specifying the Category 2B threshold conditions.

(5)

OFCOM must provide the Secretary of State with advice based on the research under sub-paragraph (2), (3) or (4) (as the case may be) as to the provision which OFCOM consider it is appropriate for the regulations in question to make.

(6)

Such advice may include advice that the regulations should include another characteristic or factor in addition to number of users and (in the case of regulations under paragraph 1(1) or (3)) functionalities, and what that other characteristic or factor should be.

(7)

As soon as reasonably practicable after OFCOM provide advice as mentioned in sub-paragraph (5)

(a)

OFCOM must publish the advice, and

(b)

the Secretary of State must make the regulations.

(8)

If the regulations include provision which differs in any material respect from provision advised by OFCOM, the Secretary of State must publish a statement which explains why the Secretary of State has departed from that advice.

(9)

A statement mentioned in sub-paragraph (8) must be published—

(a)

no later than the time at which the regulations to which the statement relates are made, and

(b)

in such manner as the Secretary of State considers appropriate for bringing it to the attention of persons who may be affected by it.

(10)

The Secretary of State may give OFCOM extra time to carry out their research in the case of regulations under paragraph 1(2) or (3), but OFCOM must carry out such research within the period of 18 months beginning with the day on which this Act is passed.

(11)

The Secretary of State may not make regulations under paragraph 1 until OFCOM have carried out research and provided advice to the Secretary of State as required by this paragraph.

Annotations:
Commencement Information

I2Sch. 11 para. 2 in force at Royal Assent, see s. 240(4)(p)

Procedure for amending or replacing regulations under paragraph 1

3

(1)

Regulations in force under paragraph 1(1) may not be amended or replaced by further regulations under that provision except following further research carried out by OFCOM into the matters mentioned in paragraph 2(2).

(2)

Regulations in force under paragraph 1(2) may not be amended or replaced by further regulations under that provision except following further research carried out by OFCOM into the matters mentioned in paragraph 2(3).

(3)

Regulations in force under paragraph 1(3) may not be amended or replaced by further regulations under that provision except following further research carried out by OFCOM into the matters mentioned in paragraph 2(4).

(4)

The further research in question—

(a)

may be initiated by OFCOM or carried out in response to a request from the Secretary of State, and

(b)

may be in as much depth as OFCOM consider appropriate.

(5)

A request from the Secretary of State to OFCOM to carry out further research must indicate why the Secretary of State considers that to be necessary.

(6)

Where such research is carried out, OFCOM must provide the Secretary of State with advice as to whether, in OFCOM’s opinion—

(a)

it is appropriate to make changes to the regulations in question, specifying the changes that OFCOM recommend, or

(b)

it is not appropriate to make any changes to the regulations in question.

(7)

OFCOM must publish such advice as soon as reasonably practicable after providing it to the Secretary of State.

(8)

Where, following such advice, regulations are amended or replaced by further regulations under the provision in question (“new regulations”)—

(a)

if the new regulations include provision which differs in any material respect from provision advised by OFCOM, the Secretary of State must publish a statement explaining the departures from that advice;

(b)

if OFCOM’s advice was as mentioned in sub-paragraph (6)(b), the Secretary of State must publish a statement explaining the reasons for the new regulations.

(9)

Where OFCOM’s advice is as mentioned in sub-paragraph (6)(a) and the Secretary of State does not make new regulations, the Secretary of State must, as soon as reasonably practicable, publish a statement explaining that decision.

(10)

A statement mentioned in sub-paragraph (8) must be published no later than the time at which the regulations to which the statement relates are made.

(11)

A statement mentioned in sub-paragraph (8) or (9) must be published in such manner as the Secretary of State considers appropriate for bringing it to the attention of persons who may be affected by it.

(12)

Sub-paragraphs (1) to (3) do not apply to regulations made only for the purpose of correcting existing regulations under paragraph 1.

Annotations:
Commencement Information

I3Sch. 11 para. 3 in force at Royal Assent, see s. 240(4)(p)

Publication of OFCOM’s advice under paragraphs 2 and 3

4

(1)

In arranging for the publication of advice under paragraph 2(7)(a) or 3(7), OFCOM must have regard to the need to exclude from publication, so far as that is practicable, matters which are confidential in accordance with sub-paragraphs (2) and (3).

(2)

A matter is confidential under this sub-paragraph if—

(a)

it relates specifically to the affairs of a particular body, and

(b)

publication of that matter would or might, in OFCOM’s opinion, seriously and prejudicially affect the interests of that body.

(3)

A matter is confidential under this sub-paragraph if—

(a)

it relates to the private affairs of an individual, and

(b)

publication of that matter would or might, in OFCOM’s opinion, seriously and prejudicially affect the interests of that individual.

Annotations:
Commencement Information

I4Sch. 11 para. 4 in force at Royal Assent, see s. 240(4)(p)

Interpretation

5

References in this Schedule to the number of users of a user-to-user part of a service or a search engine are to the number of United Kingdom users of such a part or search engine.

Annotations:
Commencement Information

I5Sch. 11 para. 5 in force at Royal Assent, see s. 240(4)(p)

6

In this Schedule the “characteristics” of a user-to-user part of a service or a search engine include its user base, business model, governance and other systems and processes.

Annotations:
Commencement Information

I6Sch. 11 para. 6 in force at Royal Assent, see s. 240(4)(p)

7

In this Schedule—

content that is harmful to children” has the same meaning as in Part 3 (see section 60);

illegal content” has the same meaning as in Part 3 (see section 59);

regulated user-generated content” has the same meaning as in Part 3 (see section 55);

search content” has the same meaning as in Part 3 (see section 57).

Annotations:
Commencement Information

I7Sch. 11 para. 7 in force at Royal Assent, see s. 240(4)(p)