Services likely to be accessed by children carry out a suitable and sufficient children's risk assessment, keep it current and repeat it before significant changes. It considers the number of child users by age group; the risk of children in each age group encountering each kind of primary priority and priority content harmful to children and any non-designated harmful content; harms affecting particular groups; functionalities such as adults being able to search for or contact children, and features like autoplay that drive use; and how design and operation affect risk. Any non-designated harmful content found must be notified to Ofcom with its incidence. Category 1 services summarise the findings in their terms of service (s.12(14)). In force: children's risk assessments due by 24 July 2025; safety duties from 25 July 2025, when the protection of children codes took effect (s.51).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.