UK Online Safety Act 2025: New Rules Explained
The UK’s Online Safety Act imposes strict duties on platforms in 2025. Learn about the £18 million fines, Ofcom's enforcement powers, and the ongoing privacy controversies surrounding encrypted messaging scans.
The UK’s Online Safety Act creates a legal duty of care for platforms to prevent harm, with fines up to £18 million for non-compliance. As of 2025, Ofcom is actively enforcing these rules, focusing on user safety and illegal content while balancing free speech rights.
What are the new platform duties in 2025?
The Online Safety Act, passed in October 2023, has matured into a robust regulatory framework for 2025. It mandates that large platforms must proactively remove illegal content and legal content harmful to children if they are likely to be accessed by minors. This shifts the burden from users to tech companies, requiring them to implement better reporting tools and age assurance measures.
How does Ofcom enforce these rules?
Ofcom, the UK’s communications regulator, holds the power to impose financial penalties on non-compliant platforms. As of 2025, the maximum fine remains at £18 million or 10% of the platform's annual global turnover, whichever is higher. In 2025, Ofcom also utilizes its powers to block access to websites deemed a persistent threat to public safety, marking a significant expansion of its enforcement capabilities since the Act’s initial commencement.
How does the Act handle encrypted messaging?
One of the most contentious aspects of the legislation is its requirement for end-to-end encrypted message providers to scan for child sexual abuse material. Security experts in 2025 continue to argue that client-side scanning compromises user privacy. The government maintains that privacy is not absolute and must yield when it comes to protecting children from exploitation. This tension remains a focal point for digital rights advocacy groups in 2025.
What is the impact on free speech?
The Act includes specific protections for journalistic and "democratically important" content. Large social media platforms are legally obligated not to remove user comments on political parties or issues, provided they are not illegal. This provision aims to preserve the public square in the digital age, but critics in 2025 worry that the definition of "illegal" is broad enough to be misused to silence dissenting views.
How are children specifically protected?
Platforms must now provide features that allow children to adjust their safety settings more easily. The 2025 enforcement focus includes rigorous audits of age assurance systems to ensure they do not unfairly discriminate or reveal sensitive biometric data. Organizations like the Children’s Commissioner have been involved in consulting on these specific safeguards throughout 2025.
Common Online Threats in 2025
- Phishing: Scammers continue to use AI-generated emails that mimic legitimate brands to steal credentials.
- Malware: Ransomware attacks have increased, targeting not just businesses but also home networks via smart devices.
- Cyberbullying: The rise of anonymous messaging apps has made tracking perpetrators more difficult, prompting calls for stricter platform accountability.
FAQs about Online Safety
Can the UK block websites without my consent?
Yes. Ofcom has the power to order the blocking of specific websites that host content posing a threat to national security or public safety. This process is subject to judicial review, but the initial order can be executed quickly to mitigate immediate harm.
Are small businesses covered by the Online Safety Act?
The Act primarily targets large platforms and services. However, the duty of care extends to any service that allows users to publish or view content. Smaller forums or social groups may face lower regulatory hurdles, but they are not entirely exempt from illegal content obligations.
How do I report a breach of the Act?
You can report concerns to Ofcom directly or through the platform's internal reporting mechanisms. Ofcom launched a dedicated portal in 2025 to streamline the processing of public complaints regarding platform non-compliance.
Does the Act affect US users in the UK?
Yes. The territorial extent of the Act covers Great Britain, meaning it applies to any user residing in the UK, regardless of their citizenship. US-based platforms must also comply with these laws to continue operating in the UK market.