Providers take proportionate design and operational measures to prevent users encountering priority illegal content, to reduce and control the risk that the service is used to commit or facilitate priority offences, and to mitigate the risks of harm identified in the latest risk assessment. They operate proportionate systems to minimise how long priority illegal content is present and to take down any illegal content swiftly once alerted or aware. Measures span compliance and risk management, design of features and algorithms, terms of use, access policies, content moderation, user controls, user support and staff policies. Terms of service must say how users are protected (addressing terrorism, CSEA and other priority content separately), describe any proactive technology, be clear and accessible, and be applied consistently. Proportionality turns on the risk assessment and the provider's size and capacity. Following the measures in Ofcom's codes is treated as compliance (s.49). In force: risk assessment duties from 16 December 2024 (first assessments due by 16 March 2025); safety duties from 17 March 2025, when the first illegal content codes took effect (s.51).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.