Providers of user-to-user services (and search services) must operate systems that secure, so far as possible, that all detected and unreported CSEA content (for non-UK providers, UK-linked content) is reported to the NCA in the form and timeframes set by regulations under s.67; giving materially false information in a report, knowingly or recklessly, is an offence (s.69). In force for user-to-user services from 3 November 2025 (S.I. 2025/371); the search service limb was not commenced by that instrument.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.