The UK's Online Safety Act: A Beginner's Guide for Parents

If your child has a smartphone, a games console or a school laptop, you have probably had at least one uneasy conversation about what they might stumble across online. The Online Safety Act is the UK's attempt to put more of the responsibility for that onto the companies running the apps and websites, rather than leaving it entirely with parents. It is long, technical legislation, but the parts that matter to families can be summed up fairly simply.

What the Act actually is

The Online Safety Act is a piece of UK law that sets rules for online services used by people in this country. It applies to a wide range of platforms: social media sites, messaging apps, video-sharing services, search engines, online games and forums where people can post content or talk to each other.

The central idea is that services must take steps to protect their users, and children in particular, from harmful material and behaviour. Instead of a single set of rules for everyone, the Act treats children as a group needing extra protection. A site that is fine for adults may need to do considerably more if children can easily sign up.

The regulator responsible for enforcing it is Ofcom. That matters in practice, because Ofcom publishes codes of practice setting out what companies are expected to do, and it can investigate and fine those that fall short.

What platforms are expected to do

The exact duties depend on the size and type of service, but the broad expectations are consistent.

• Assess the risks. Companies must carry out assessments of how their service could harm children, including risks from content and from contact with other users.
• Reduce those risks. That can mean changing recommendation feeds, tightening search results, adding age checks or restricting features for younger users.
• Handle reports properly. Services need clear, accessible ways for users and parents to report problems, and systems for acting on those reports.
• Be transparent. Platforms are expected to publish information about their safety measures and terms, so families can see what is being done.
• Act quickly on illegal content. Where content is clearly illegal, services must have processes to remove it promptly once they are aware of it.

Age assurance is one of the more visible changes. Some services now ask users to prove their age, or use other signals to estimate it, before allowing access to certain features or content. The methods vary, and so does how well they work, but the direction of travel is clear: fewer services will simply take a child's word for it.

What the Act does not do

It is worth being realistic. The Act does not make the internet risk-free, and it does not remove the need for parental involvement. It also does not mean every platform is now perfectly safe, or that rules are enforced overnight. Companies have been given time to comply, and Ofcom's codes have been rolled out in stages.

Nor does it replace the law itself. If something illegal happens, such as grooming or the sharing of indecent images, that is a matter for the police. Platforms have duties, but so do the authorities.

Practical steps you can take this week

You do not need to read the legislation to make a difference at home. Small, consistent habits tend to work better than one big lecture.

1. Get to know the apps your child actually uses. Ask them to show you. Spend ten minutes in the app yourself, looking at privacy settings and who can message them.
2. Turn on the safety tools that already exist. Most platforms have settings for restricting contact, limiting who can comment, and filtering content. Many parents never open that menu.
3. Use device-level controls as a backstop. Both iOS and Android offer screen time limits, content restrictions and app-by-app controls. Your broadband provider may also offer free filtering for your home network.
4. Agree a family approach to devices. Charging phones outside bedrooms overnight, and keeping screens out of mealtimes, removes a lot of low-level friction.
5. Talk about the awkward stuff early. Children are far more likely to tell you about something upsetting if they already know you will not overreact.
6. Know how to report. Learn where the report button is on the main apps your child uses, and how to make a report to Ofcom if a platform ignores a serious concern.

Conversation starters that work better than interrogation

Instead of "what are you doing on your phone?", try "who do you talk to most online?" or "has anything weird ever popped up for you?" Open questions get more honest answers. If your child tells you something worrying, thank them for saying it before you deal with the problem.

If something goes wrong

Stay calm, take screenshots, and use the platform's reporting tools. For anything involving threats, sexual content or contact from an adult, report it to the police. If you are dealing with a serious safeguarding concern, your child's school or your local authority safeguarding team can advise. For legal questions about your specific situation, it is worth speaking to a solicitor rather than relying on general guidance.

The bottom line for parents

The Online Safety Act shifts some of the burden onto the companies, and that is a welcome change. But it works best alongside engaged parents, not instead of them. Pick two or three actions from the list above, do them properly, and revisit them every few months as your child's online life changes. That is a far more useful use of an evening than trying to read the whole Act.