Ofcom will enforce rules under the UK's Online Safety Act, designed to protect internet users from illegal content and harmful activity online, from March 17
Daniel Thomas / Financial Times :
Context & Ripple Effects
The Act moved from legislation with substantial potential penalties to implementation: the 2023 law created Ofcom’s enforcement framework, and Ofcom said in December that its illegal-content duties had taken effect and would expand in 2025.
March 17 marks the transition from published obligations to active supervision. It is the foundation for later, more prescriptive platform requirements, including the child-safety measures proposed for websites and apps.
First-order effects
- Online services within scope must now meet the Act’s illegal-content and harmful-activity duties under active Ofcom enforcement rather than prepare for them prospectively.
- Ofcom gains a live compliance role, allowing it to assess whether platforms’ safety systems satisfy the rules and to pursue failures through the Act’s enforcement process.
Second-order effects
- Platforms will need to operationalize content-reporting, moderation, and risk-management processes consistently enough to withstand regulatory scrutiny, raising the importance of documented safety controls.
- The start of enforcement gives Ofcom’s later platform-specific actions greater weight; its push for stronger UK protections from X illustrates how general duties can translate into concrete service changes.
Third-order effects
- If enforcement is sustained, UK online-safety compliance is likely to become an enduring operating constraint for platforms, not a one-off policy response, with access and content controls increasingly shaped by regulatory expectations.
- The regime may establish a template in which broad statutory safety duties are progressively made concrete through codes, investigations, and service-level commitments; how consistently that changes user protection will depend on enforcement capacity and platform compliance.
The trend: This is a milestone in the shift from voluntary platform safety policies toward regulator-enforced access and content-governance obligations.