Online HarmBill
Menu

The Online Safety Act—without the legal jargon

What changes when you open an app?

You may be asked to prove your age. A post may be removed by software. Services that promise private messages may face new demands. Here is what is happening now, what could happen next and where you still have a say.

Show me what affects meHelp me write to my MP
A private chat is one of the everyday places where the Act raises questions.
Already lawSome rules are liveOther decisions are still being madeChecked 8 August 2026 source source

What brought you here?

Pick the situation that sounds most like yours

I use private messagingCould a service be made to check messages that are meant to stay private?Show me →A website wants to check my ageWhat might it ask for—and what should it avoid keeping?Show me →A post or account of mine was removedHow do automated decisions and appeals work?Show me →I run a small site, app or forumWhat could the new duties ask of a tiny team?Show me →I’m a parent or carerWhat are the rules trying to protect children from?Show me →I want the one-minute explanationWhat is already happening and what is still undecided?Show me →

What this looks like in real life

Four ordinary moments. Four important questions.

These are made-up examples, not reports of things that have happened. Scroll through them to see what the rules could mean in everyday life.

01 You open a private chat

Who can see your message?

Right now: no general message-scanning order is in place. The Act does contain a power that could one day be aimed at a particular service.

That distinction matters. A power written into law is not the same as your messages being scanned today. Any future system should have to prove it will not make private conversations less secure. source

Could anyone be forced to scan my messages? →
Made-up example: two people use a private group chat while a possible future legal power remains outside the conversation.

02 A website asks your age

Does it need to know your name?

Not always: some checks use identity documents, but others can simply tell the website “over 18: yes or no”.

Before continuing, you should be able to see what information is used, who receives it, how long it is kept and what to do if the answer is wrong. source source

Will I have to upload ID? →
Made-up example: several age-check methods lead to a simple over-18 result while the original inputs are deleted.

03 A safety filter removes your post

Can a person look at it again?

They should: software can spot patterns, but it can miss jokes, news reporting and people talking about abuse or recovery.

The website still makes the decision. A clear explanation and a fair appeal give context a second chance when an automated system gets it wrong. source source

Why was my post removed—and can I appeal? →
Made-up example: a person reports a post and receives a clear message that it will be checked.

04 You run a forum after work

Can a tiny team keep up?

That is the test: the work is meant to match the risk. It still takes time when a whole community is run by a few volunteers.

Small services are not automatically outside the rules. Plain guidance, useful templates and realistic expectations can decide whether a valuable community stays open. source source

Could new rules make small forums shut down? →
Made-up example: three volunteers run a small community and receive a realistic, supported to-do list.

Take five minutes

Tell your MP what good online-safety rules should look like.

Choose what matters to you, make the letter your own, then copy it to WriteToThem. We do not collect what you type.

Make my MP letter

What’s changing

Latest updates

All updates →
What we found

You should not have to take our word for it.

Legal facts and statistics link to their source. Opinion is labelled as our campaign view. We date every evidence check and keep old updates in the archive.

Search the full source library and read our method →

Sources used on this page

Home page sources

  1. Data protection guidance

    Information Commissioner's Office. Expectations for age assurance and data protection compliance.

    ICO guidance on lawful, fair, transparent, proportionate and privacy-conscious age assurance. Published 14 October 2021; last checked 8 August 2026.

  2. Regulator statement

    Ofcom. Ofcom's approach to implementing the Online Safety Act.

    Ofcom's implementation roadmap, milestones, active duties and planned regulatory work, updated in July 2026. Published 26 October 2023; last checked 8 August 2026.

  3. Regulator statement

    Ofcom. Statement: Technology Notices.

    Ofcom's final guidance on exercising technology-notice powers and advice on minimum accuracy standards. Published 8 May 2026; last checked 8 August 2026.

  4. Regulator evidence

    Ofcom. Use of Age Assurance Report 2026.

    Ofcom's statutory assessment of how regulated services have used age assurance and early evidence of effectiveness. Published 15 July 2026; last checked 8 August 2026.

  5. Regulatory guidance

    Ofcom. Online Safety Act compliance guide for providers of online services.

    Practical regulatory guidance for services on deciding whether the Act applies and meeting their duties. Published 16 December 2024; last checked 8 August 2026.

  6. Regulator statement

    Ofcom. Register of categorised services and list of emerging Category 1 services.

    The statutory register published in July 2026, with Category 1, 2A and 2B services and applicable thresholds. Published 30 June 2026; last checked 8 August 2026.

  7. Primary legislation

    UK Parliament. Online Safety Act 2023.

    The current consolidated text of the Act, including regulated services, duties, enforcement powers, safeguards and exemptions. Published 26 October 2023; last checked 8 August 2026.