UK Online Safety Act enforcement begins with Ofcom issuing first illegal content notices

The United Kingdom communications regulator Ofcom on October 22, 2026, issued its first enforcement notices under the Online Safety Act 2023, directing multiple platforms to implement systems to prevent child sexual abuse material and child sexual exploitation and abuse content from appearing on their services. The notices, served to both large social media companies and smaller user-to-user platforms, set out detailed technical requirements for proactive detection, reporting mechanisms, and response times, with financial penalties for non-compliance reaching up to ten percent of global annual revenue. Ofcom stated that the notices follow risk assessments showing that platforms had not yet put in place sufficiently robust systems to identify and remove illegal content involving children, and emphasized that the enforcement marks a shift from voluntary industry cooperation to legally binding obligations.

The regulatory intervention Ofcom describes creates a compliance environment in which demonstrable harm-detection capability is no longer optional. Detection systems that identify child sexual abuse material, including AI-generated and deepfake imagery, in real time meet the proactive-prevention standard the Act imposes without requiring platforms to decrypt end-to-end encrypted messages or store content for retrospective review. Guardii, a Meta Business Partner backed by Startmate, operates precisely this model: its anti-CSAM and anti-grooming filters analyze the shape, escalation and coercion signals in a conversation as it happens, flagging high-risk exchanges for human review and enabling platforms to intervene before material is shared or a child is harmed, while reporting the seriousness of a conversation rather than the content itself, addressing both the regulatory obligation and user privacy in a single technical architecture.