The Online Safety Act 2023 (Category 1, Category 2A and Category 2B Threshold Conditions) Regulations 2025

These regulations, made under the Online Safety Act 2023, define threshold conditions for categorizing online services as Category 1, 2A, or 2B. Category 1 applies to user-to-user services exceeding certain user numbers and using content recommender systems or offering content sharing functionalities.

Category 2A applies to search engines exceeding user number thresholds except those focusing exclusively on specified topics.

Category 2B covers user-to-user services with high user numbers supporting direct messaging functionalities.

The regulations stipulate how to calculate average monthly active UK users to determine category fit and came into force the day after enactment.

Arguments For

  • Enhanced Online Safety: The regulations aim to improve online safety by establishing clear criteria for classifying high-impact online services.

  • Targeted Regulation: By focusing on services exceeding specific user numbers and employing particular functionalities, the regulations prioritize intervention on platforms most likely to spread harmful content.

  • Evidence-Based Approach: The regulations were developed with research from OFCOM, ensuring a data-driven approach to determining effective thresholds.

  • Parliamentary Approval: A draft of the regulations received parliamentary approval, strengthening their legitimacy and accountability.

  • Legal Clarity: The regulations provide clear definitions and criteria for service classification, reducing ambiguity for online service providers and regulators alike.

Arguments Against

  • Burden on Businesses: Meeting the regulations' requirements may impose significant compliance costs on online service providers, particularly smaller companies.

  • Potential for Overreach: The specified user number thresholds might inadvertently catch platforms not posing significant safety risks.

  • Definition Challenges: The definition of terms such as "content recommender system" could be interpreted differently and may necessitate further clarification.

  • Limited Scope: The regulations only address specific categories of services leaving other potentially harmful aspects of online activity unregulated.

  • Enforcement Challenges: Overseeing and enforcing the regulations across multiple platforms and jurisdictions could prove challenging for regulatory bodies.

Citation, commencement and extent1.

(1)

These Regulations may be cited as the Online Safety Act 2023 (Category 1, Category 2A and Category 2B Threshold Conditions) Regulations 2025.

(2)

These Regulations come into force on the day after the day on which they are made.

(3)

These Regulations extend to England and Wales, Scotland and Northern Ireland.

Interpretation2.

In these Regulations “active United Kingdom user” means—

(a)

in relation to a regulated user-to-user service2, any United Kingdom user3 who has accessed the user-to-user part of that service;

(b)

in relation to the search engine4 of a regulated search service5 or the search engine of a combined service6, any United Kingdom user who has encountered7 search content8 in or via search results9 of that regulated search service or combined service.

Category 1 threshold conditions3.

(1)

The Category 1 threshold conditions10 are met by a regulated user-to-user service where, in respect of the user-to-user part of that service, it—

(a)

(i)

has an average number of monthly active United Kingdom users that exceeds 34 million, and

(ii)

uses a content recommender system, or

(b)

(i)

has an average number of monthly active United Kingdom users that exceeds 7 million,

(ii)

uses a content recommender system, and

(iii)

provides a functionality for users to forward or share regulated user-generated content11 on the service with other users of that service.

(2)

In paragraph (1), a “content recommender system” means a system, used by the provider of a regulated user-to-user service in respect of the user-to-user part of that service, that uses algorithms which by means of machine learning or other techniques determines, or otherwise affects, the way in which regulated user-generated content of a user, whether alone or with other content, may be encountered by other users of the service.

Category 2A threshold conditions4.

The Category 2A threshold conditions12 are met by a search engine of a regulated search service or a combined service where it—

(a)

has an average number of monthly active United Kingdom users that exceeds 7 million, and

(b)

is not a search engine which—

(i)

only enables a user to search selected websites or databases in relation to a specific topic, theme or genre of search content, and

(ii)

is facilitated by means of an arrangement between the provider of a regulated search service or combined service with one or more entities, which relies on an application programming interface or other technical means to present search results to users.

Category 2B threshold conditions5.

The Category 2B threshold conditions13 are met by a regulated user-to-user service where, in respect of the user-to-user part of that service, it—

(a)

has an average number of monthly active United Kingdom users that exceeds 3 million, and

(b)

provides a functionality for users to send direct messages to other users of the same service which is designed so that messages cannot be encountered by any other users of that service unless further action is taken by the user who sent the message or a user who received the message.

Determining the number of active United Kingdom users6.

(1)

A service’s average number of monthly active United Kingdom users for the purposes of regulations 3 to 5 is the mean number of active United Kingdom users per month for the relevant period.

(2)

The “relevant period” in relation to an assessment under section 95, 96 or 97 of the Online Safety Act 2023 is the six-month period ending with the month preceding the month in which that assessment begins.

(3)

Where the service has been in operation for less than six months, reference to “the six-month period” in paragraph (2) is to be read as “the period for which the service has been in operation”.

Related

The Air Navigation (Restriction of Flying) (Dinas Powys, Wales) (Emergency) Regulations 2026

Fri 10th Apr 26

Regulations immediately restricted unmanned aircraft below 1,400 feet over a specified area in Dinas Powys, Wales, due to an emergency.

Read More

The Power to Award Degrees etc. (Spurgeon’s College) (Revocation) Order 2026

Thu 9th Apr 26

The Office for Students revoked the 2022 and 2025 Orders granting degree awarding powers to Spurgeon's College because the institution ceased to be a registered higher education provider.

Read More

The Tribunal Procedure (First-tier Tribunal) (Property Chamber) (Amendment) Rules 2026

Wed 8th Apr 26

The Rules amended the 2013 Tribunal Procedure for the Property Chamber to incorporate jurisdiction under the Renters' Rights Act 2025 and adjusted provisions related to costs orders for Housing Act 1988 financial penalty appeals.

Read More

Correction Slip

Tue 7th Apr 26

A correction notice was issued for The Mental Health Act 2025 (Commencement No. 1) Regulations 2026, amending a referencing error in a footnote.

Read More