Made under the Online Safety Act 2023

12 statutory instruments made using powers in the Online Safety Act 2023, newest first. Each one is explained section by section in plain English.

The Online Safety Act 2023 (Fees Notification) Regulations 2025

Published: Fri 27th Jun 25 Came into force: Sun 14th Sept 25

The Online Safety Act 2023 (Fees Notification) Regulations 2025 were enacted, outlining the necessary documentation and procedures for providers of regulated online services to submit fee-related information to OFCOM.


The Online Safety Act 2023 (Fees Notification) Regulations 2025, effective September 14, 2025, mandate evidence submission by providers of regulated online services to OFCOM for fee calculations under the 2023 Act.

These regulations specify the required information, including financial statements and declarations of accuracy, and the prescribed method for submission, clarifying the process outlined in the Online Safety Act 2023.

Read More

The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025

Published: Thu 20th Mar 25 Came into force: Mon 3rd Nov 25

The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025 established mandatory reporting procedures for CSEA content to the NCA, including registration requirements for providers and detailed specifications for report content, formatting, and data retention.


These regulations mandate that UK online service providers of regulated user-to-user services report child sexual abuse and exploitation (CSEA) content to the National Crime Agency (NCA).

Providers must register with the NCA, designating an organisation administrator and potentially an authorised person for reporting.

The regulations specify the information to be included in reports, their formatting, submission methods (API or manual), and urgency levels based upon risk assessment.

Data retention requirements for both CSEA content and associated user data are also outlined.

Read More

The Online Safety Act 2023 (Commencement No. 5) Regulations 2025

The Online Safety Act 2023 (Commencement No. 5) Regulations 2025 brought into force provisions regarding mandatory reporting of child sexual exploitation and abuse content to the NCA, along with related offenses and transparency reporting requirements, effective November 3rd, 2025.


These regulations, effective November 3rd, 2025, implement parts of the Online Safety Act 2023 in England, Wales, Scotland, and Northern Ireland.

They mandate that providers of regulated user-to-user services report Child Sexual Exploitation and Abuse (CSEA) content to the National Crime Agency (NCA), establishing related offenses and outlining reporting processes.

The regulations also specify the commencement date for several other Act provisions related to CSEA reporting, information offences, and transparency reports, all within the context of regulated user-to-user services.

Read More

The Online Safety Act 2023 (Category 1, Category 2A and Category 2B Threshold Conditions) Regulations 2025

Published: Thu 27th Feb 25 Came into force: Thu 27th Feb 25

The regulations established threshold conditions for classifying online services as Category 1, 2A and 2B under the Online Safety Act 2023, based on user numbers and functionalities.


These regulations, made under the Online Safety Act 2023, define threshold conditions for categorizing online services as Category 1, 2A, or 2B. Category 1 applies to user-to-user services exceeding certain user numbers and using content recommender systems or offering content sharing functionalities.

Category 2A applies to search engines exceeding user number thresholds except those focusing exclusively on specified topics.

Category 2B covers user-to-user services with high user numbers supporting direct messaging functionalities.

The regulations stipulate how to calculate average monthly active UK users to determine category fit and came into force the day after enactment.

Read More