Ofcom has released its first codes of practice under the UK's Online Safety Act, which aims to enhance online safety by imposing new duties on tech firms to protect users from illegal harms.

These codes legally require online providers to safeguard users against illegal content, detailing specific responsibilities in the Illegal Harms Codes.

High-risk platforms must implement advanced detection tools, such as hash-matching technology, to effectively identify and remove child sexual abuse material (CSAM).

The requirement for automated detection tools now extends to smaller file hosting sites, ensuring a broader application of safety measures.

By March 17, 2025, platforms including Facebook, Google, and Reddit must assess the risks of exposing users to illegal content and implement necessary safety measures.

Technology Secretary Peter Kyle emphasized that these regulations represent a significant shift in online safety policy, mandating proactive measures from tech firms or facing severe penalties.

Non-compliance with these regulations could result in fines of up to £18 million or 10% of a company's global revenue, with Ofcom empowered to block access to non-compliant sites.

The Online Safety Act, enacted in 2023, aims to protect children and eliminate illegal content from online platforms, covering over 130 priority offences.

Ofcom has introduced more than 40 safety measures that must be implemented by mid-March 2025, targeting threats such as terrorism, hate crimes, and child exploitation.

New measures specifically focus on protecting children from online sexual abuse by restricting their interactions with strangers and preventing unsolicited messaging.

Ofcom is committed to continuously reviewing and adapting regulations in response to technological advancements, including the challenges posed by generative AI.

The guidelines include requirements for risk assessment, user complaint mechanisms, and senior accountability to ensure compliance with illegal content regulations.