UK Online Safety Act 2023

Jurisdiction:
United Kingdom
phased enforcement
Effective:
Mar 17, 2024
Authority:
Office of Communications (Ofcom)
Official text Verified Mar 26, 2026

Obligations Covered

Transparency & Disclosure Risk Assessment

Provisions (2)

AI-Generated Content Duties #

Obligation:
Transparency
enforcing
Effective:
Mar 17, 2024
Risk tier:
all
Scope:
providers, deployers

Requirements

RequirementDetails
Illegal content dutyPlatforms must address AI-generated illegal content (deepfakes, CSAM)
Children's safetyPrevent AI-generated or amplified content harmful to children
Risk assessmentPlatforms must assess risks from AI-generated content
Transparency reportsAnnual transparency reports on content moderation including AI systems

Penalties

ViolationFine
Non-complianceUp to GBP 18M or 10% global turnover
Senior manager liabilityCriminal liability for senior managers in certain cases

Risk Assessment for AI Systems #

Obligation:
Risk Assessment
enforcing
Effective:
Mar 17, 2024
Risk tier:
all
Scope:
providers

Requirements

RequirementDetails
Illegal content risk assessmentAssess risks of AI systems generating or amplifying illegal content
Children's risk assessmentAssess risks of AI-generated content reaching children
Mitigation measuresImplement proportionate measures to mitigate identified risks

Penalties

ViolationFine
Non-complianceUp to GBP 18M or 10% global turnover