Plain-English issue guide

Could new rules make small forums shut down?

They should not, but following the rules still takes time and money. The real test is whether the work is realistic for volunteers and tiny teams.

Quick answer

What you need to know

Do the rules cover me?: Possibly. What matters is what the service does, its UK links and its risks—not size alone.
How much work?: The work is meant to match the risk, while the largest services have additional duties.
Where can I get help?: Ofcom provides guidance, but tiny teams also need useful templates and realistic expectations.

Checked against official sources on 8 August 2026 ^source^source^source

Made-up example: a small forum is run by three volunteers who need a realistic to-do list.

Want the detail?Check the law, evidence and open questionsIncludes what the law requires, what Ofcom says, safeguards, technical diagrams and every source.

See the technical process diagram

Proportionality should lead to a realistic route for smaller services—not a scaled-down copy of a global platform’s compliance team.

What does the law actually require?

In the law

The Act can apply to user-to-user and search services with links to the UK, not only to large social networks. Core duties are risk-based and measures must be proportionate, while additional duties apply to services placed in Categories 1, 2A or 2B. ^source

Is this happening now?

What Ofcom says

Illegal-content and child-safety duties are already in force. Ofcom published the register of categorised services in July 2026. Small services below those thresholds can still have core duties if they are in scope, but they do not automatically acquire every additional categorised-service duty. ^source ^source

What do we know so far?

What Ofcom says

Ofcom’s compliance materials centre on four recurring tasks: understand whether a service is in scope, assess risks, choose proportionate measures, and keep relevant records. Risk and functionality—not company size alone—shape what is reasonable. ^source

What could go wrong?

Our view

A volunteer forum, specialist community or early-stage service may have fewer risks than a global platform but far less legal and engineering capacity. Guidance, templates and enforcement practice should make proportionality real in the work required, not merely in the final measure selected.

What is this trying to fix?

In the law

Harm can occur on smaller or specialised services too. A risk-based scope is intended to avoid a size-only loophole while allowing lower-risk providers to take lighter measures. ^source

What protections are built in?

What Ofcom says

The Act and Ofcom guidance repeatedly use proportionality. The largest additional-duty regime is tied to published thresholds, while Ofcom supplies compliance guidance intended to help providers work through their obligations. ^source ^source

What has not been decided?

How much evidence is enough for a genuinely low-risk microservice?
Can reusable templates reduce legal and record-keeping costs without becoming box-ticking?
Will enforcement communications give small operators enough time and clarity to respond?
What evidence will show whether compliance is causing small, beneficial communities to close or restrict access?

Sources for this page

Regulatory guidance
Ofcom. Online Safety Act compliance guide for providers of online services.
Practical regulatory guidance for services on deciding whether the Act applies and meeting their duties. Published 16 December 2024; last checked 8 August 2026.
Regulator statement
Ofcom. Register of categorised services and list of emerging Category 1 services.
The statutory register published in July 2026, with Category 1, 2A and 2B services and applicable thresholds. Published 30 June 2026; last checked 8 August 2026.
Regulator statement
Ofcom. Ofcom's approach to implementing the Online Safety Act.
Ofcom's implementation roadmap, milestones, active duties and planned regulatory work, updated in July 2026. Published 26 October 2023; last checked 8 August 2026.
Primary legislation
UK Parliament. Online Safety Act 2023.
The current consolidated text of the Act, including regulated services, duties, enforcement powers, safeguards and exemptions. Published 26 October 2023; last checked 8 August 2026.