If you run a business or creative agency providing services over the internet, the UK Online Safety Act (“OSA”) is something you’ll need to get familiar with. The OSA objective is not to “catch out” businesses, it is to make the internet safer for people in the UK, particularly for children, and will bring significant changes to how online platforms operate.
The first major milestone is coming soon: 16 March 2025.
We set out below what this milestone is, how it could apply to your business and what you need to know to prepare.
Do I really need to know about OSA?
Yes, you need to know about OSA if any of the following applies to your business:
- your business operates any online platform that hosts user-generated content or enable online interactions—like social media sites, forums, or even some e-commerce platforms;
- your business’ online services are or include a search engine.
But my target audience are not children.
You are still affected if your platform is easily and readily accessible by children, regardless of whether they are your target audience or not.
What if my business is not registered in the UK or my business’ online services are not provided from the UK?
The online world is not confined by geography and neither are laws and regulations affecting them; if your online services are any way linked to the UK then OSA applies.
But everything above applies to my client not me.
For businesses working in marketing or platform design, this is also something to keep in mind—your clients may look to you for advice or solutions to meet these new requirements.
Key deadlines to be aware of
- 16 March 2025: Illegal harms risk assessments deadline
Businesses operating online platforms will need to conduct risk assessments to evaluate potential risks and harms; and how you plan to mitigate them. - 17 March 2025: Implementation of safety measures
You’ve done the assessment and planned how to mitigate potential risks and harms; now it is time to start implementing those mitigation measures.
- 16 April 2025: Children’s access assessments deadline
Businesses operating online platforms and/or search engines will need carry out assessment to ascertain whether their services (even in part) are likely to be accessed by children.
- April 2025 to July 2025: Full child safety rules take full effect
In April 2025 Ofcom will publish its Protection of Children Codes and risk assessment guidance. It is anticipated that within 3 months of such publication protective measures in-line with the code will need to be implemented by affected online platforms. This could mean tighter content moderation, introducing tools like parental controls, or redesigning features to make them safer for younger users.
Why this matters
The focus is on accountability. Platforms must identify risks of harm (such as bullying, exploitation, or exposure to inappropriate material) and take reasonable steps to address them.
Non-compliance with OSA could lead to serious penalties. Ofcom has the power to issue fines of up to £18 million or 10% of global turnover (whichever is higher). Beyond that, it’s also about building trust—parents and users alike will favour platforms that are seen to prioritise safety.
What steps can you take now?
- Review your platform
Assess whether children could access your platform, even indirectly. Identify potential risks they might face and consider what safeguards you already have in place. - Stay informed
Ofcom will be issuing detailed guidance on compliance in the coming months, so make sure you’re keeping an eye on updates. - Seek expert advice
If you’re unsure about your responsibilities under OSA, getting legal or compliance advice now can help you prepare.
OSA is all about creating a safer digital world for everyone, but particularly for children. With the first deadline just around the corner, now’s the time to start thinking about how this might affect your business.
If you’ve got questions or need guidance, feel free to get in touch—we’re here to help.
Kay graduated with a law degree from Southampton University and has over ten years experience practising commercial law in-house.
