Is my software platform in scope of the Online Safety Act?

The Online Safety Act 2023 puts duties on services that let users share content with each other or that search the web, enforced by Ofcom. The duties scale with the size and risk of the service, and they cover illegal content, children's safety and age checks. A small app with user-generated content can be in scope. The Act on legislation.gov.uk.

What it means for your start-up

The Act reaches beyond social media. Forums, community features, file sharing, and AI chat tools that let users share generated content can all count as user-to-user services. A business tool with a public community or user uploads may be in scope even if that is not its main purpose.

What to do now

1. Audit every feature where users can see each other's content, including comments, uploads and shared chats.
2. Use Ofcom's guidance to decide whether you are in scope, and record your reasoning if you decide you are not.
3. Watch Ofcom's work on generative AI, where its view of what counts is still developing.

In Parliament

Marked: mentions software and ai directly.

• What statutory safety obligations apply to frontier AI developers operating in the UK.
  Written answer · 22 October 2026
  Asked by Bell Ribeiro-Addy (Lab). Artificial Intelligence: Regulation — AI is already regulated in the UK through existing laws and regulators, covering data protection, competition, product safety, and online…
• What steps she is taking to reduce the number of anonymous, software-controlled ‘bot’ accounts spreading hateful messages on social media platforms.
  Written answer · 19 October 2026
  Asked by Afzal Khan (Lab). Social Media: Harassment — The Government recognises the harm posed by bot-produced content online. The Online Safety Act requires social media platforms to tackle illegal content and…
• Whether her Department has carried out an impact assessment into the a) risk and b) impact on UK based individuals of data breaches of technology firms who…
  Written answer · 8 September 2026
  Asked by Ruth Cadbury (Lab). Age Assurance: Data Protection — The UK’s data protection legislation applies to organisations that process personal data, including age assurance services. The legislation requires…
• If she will formally request that Google and other online platforms prevent the monetisation of extreme and divisive far-right content, such as that of Danny…
  Written answer · 4 November 2026
  Asked by Helen Maguire (LD). Internet: Radicalism — Under the Online Safety Act, platforms must tackle illegal content, including terrorist content and race- or religion-based hatred, and protect children from…
• What steps they are taking to ensure consistent accuracy of age estimation technology for accessing age restricted content.
  Written answer · 4 November 2026
  Asked by Lord Taylor of Warwick. Age Assurance: Technology — Ofcom’s guidance requires highly effective age assurance to meet criteria including accuracy, robustness, reliability and fairness. Ofcom monitors how age…
• What assessment she has made of the adequacy of regulations aimed at tackling abusive content towards LGBTQ+ people online; and whether she plans to introduce…
  Written answer · 30 October 2026
  Asked by Dr Peter Prinsley (Lab). Internet: Harassment — The Government is committed to tackling online abuse including targeted abuse of LGBTQ+ people. The Online Safety Act requires platforms to tackle illegal…

Related guides

• What do the CMA's digital markets rules mean for software?
• Is there a UK AI law my software start-up must follow?
• Does the Online Safety Act apply to my app?
• What the Data (Use and Access) Act changes for software firms

Contains public sector information licensed under the Open Government Licence v3.0. Contains Parliamentary information licensed under the Open Parliament Licence v3.0. General information, not legal advice.