UK publishes its online safety legislation plans: tech companies will face fines of up to £18M or 10% of annual revenue if they fail to moderate illegal content
Long-awaited legislation will set out new duty-of-care requirements for online platforms
Context & Ripple Effects
This announcement is the second step in a UK arc that began with the 2019 whitepaper proposing a "code of best practice" for harmful content — including the suggestion of extending liability to tech executives. The 2020 plans convert that whitepaper into concrete enforcement: a statutory duty of care on platforms, with fines up to £18M or 10% of annual revenue for failing to moderate illegal content, overseen by Ofcom.
The penalty scale matters because it scales with revenue rather than being capped, and it arrives alongside a parallel track: the UK's separate legislation empowering the CMA's Digital Markets Unit against Big Tech dominance. Together they signal the UK building both content and competition enforcement for platforms in the same window.
First-order effects
- Platforms operating in the UK now face a quantified downside — £18M or 10% of annual revenue — for illegal content they fail to remove, making moderation resourcing a board-level cost decision rather than a policy preference.
- Ofcom is positioned as the enforcement body, giving the regulator a new remit over platform conduct that did not previously carry statutory fines.
Second-order effects
- Social media firms must build UK-specific compliance and escalation processes, and the later amendment forcing CSAM removal under threat of the same fines shows how the duty of care expands once the framework exists.
- Rival jurisdictions watching the UK's template face pressure to match the revenue-linked penalty model, since platforms can otherwise arbitrage the strictest regime by treating it as one market's compliance cost.
Third-order effects
- If the pattern holds through to the Online Safety Bill becoming law with fines up to 10% of global turnover, platform liability shifts from self-regulation toward regulator-enforced codes of practice — a structural change in how online speech is governed.
- The combination of content fines and the Digital Markets Unit points toward a two-pillar UK regime — conduct and competition — that other regulators may replicate, with platform compliance functions consolidating around whichever regime sets the strictest floor.
The trend: The UK is moving platform governance from voluntary best practice to revenue-linked statutory fines enforced by Ofcom, a template other regulators are likely to follow.