Back to Frameworks

UK Online Safety Act 2023

United Kingdom (Ofcom)
v2023
4 domains
19 controls

The UK Online Safety Act 2023 establishes a comprehensive regulatory framework for online safety, placing duties on user-to-user services and search services to protect users from illegal content and, for larger platforms, content harmful to children. Ofcom is the regulator. Category 1 services (largest platforms with highest risk) face additional duties regarding content harmful to adults, user empowerment, and transparency. The Act covers illegal content duties, child safety duties, fraudulent advertising, and platform transparency. Significant penalties including up to 10% of global revenue.

Verified

UK Online Safety Act 2023 is a compliance framework from United Kingdom (Ofcom) with 4 domains and 19 controls that map to 23 other frameworks. The largest domains are Online Safety Act: Duties of Care (6 controls), Online Safety Act: Communications Offences and Child Protection (5 controls), Online Safety Act: Ofcom Codes and Enforcement (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (4)

Online Safety Act: Communications Offences and Child Protection

5 controls
Controls in the Online Safety Act: Communications Offences and Child Protection domain of UK Online Safety Act 20235 controls
CodeTitle
UKOSA-OFF-01False Communications Offence
UKOSA-OFF-02Threatening Communications Offence
UKOSA-OFF-03Intimate Image Abuse Offence
UKOSA-OFF-04CSAM Reporting to NCA
UKOSA-OFF-05Age Verification Requirements

Online Safety Act: Duties of Care

6 controls
Controls in the Online Safety Act: Duties of Care domain of UK Online Safety Act 20236 controls
CodeTitle
UKOSA-DC-01Illegal Content Risk Assessment
UKOSA-DC-02Illegal Content Safety Duties
UKOSA-DC-03Children's Risk Assessment
UKOSA-DC-04Children's Safety Duties
UKOSA-DC-05User Empowerment Duties
UKOSA-DC-06Content Reporting Mechanisms

Online Safety Act: Ofcom Codes and Enforcement

5 controls
Controls in the Online Safety Act: Ofcom Codes and Enforcement domain of UK Online Safety Act 20235 controls
CodeTitle
UKOSA-REG-01Codes of Practice
UKOSA-REG-02Information Gathering Powers
UKOSA-REG-03Enforcement Notices
UKOSA-REG-04Financial Penalties
UKOSA-REG-05Business Disruption Measures

Online Safety Act: Transparency Reporting

3 controls
Controls in the Online Safety Act: Transparency Reporting domain of UK Online Safety Act 20233 controls
CodeTitle
UKOSA-TR-01Annual Transparency Reports
UKOSA-TR-02Content Moderation Information
UKOSA-TR-03Algorithmic Transparency

Maps to 23 other frameworks

19 total controls
Australia Online Safety Act 2021
6 source controls mapped|7 target controls covered
32%
Australia eSafety Commissioner - Online Safety Expectations for Industry
3 source controls mapped|3 target controls covered
16%
API 1164
2 source controls mapped|1 target controls covered
11%
ISO 27019
2 source controls mapped|1 target controls covered
11%
SASB Standards
2 source controls mapped|1 target controls covered
11%
NIST SP 1800-32
2 source controls mapped|1 target controls covered
11%
IEC 62443
2 source controls mapped|1 target controls covered
11%
Barbados Data Protection Act 2019
2 source controls mapped|1 target controls covered
11%
IAIS Insurance Core Principles (ICPs)
2 source controls mapped|1 target controls covered
11%
UNESCO Recommendation on the Ethics of AI
1 source controls mapped|3 target controls covered
5%
Automotive SPICE (ASPICE) v4.0 - Process Assessment Model
1 source controls mapped|3 target controls covered
5%
5%
ISO/IEC 23894:2023
1 source controls mapped|3 target controls covered
5%
RICS Professional Standards - Data and Technology in Property
1 source controls mapped|1 target controls covered
5%
WHO Global Strategy on Digital Health 2020-2025
1 source controls mapped|1 target controls covered
5%
Singapore AI Governance Framework
1 source controls mapped|2 target controls covered
5%
NIST SP 800-53 Rev 5 LOW
1 source controls mapped|1 target controls covered
5%
NIST SP 800-53 Rev 5 MODERATE
1 source controls mapped|1 target controls covered
5%
FedRAMP Moderate
1 source controls mapped|1 target controls covered
5%
NIST SP 800-53 Revision 5.1 HIGH
1 source controls mapped|1 target controls covered
5%
FedRAMP High
1 source controls mapped|1 target controls covered
5%
UK Data Protection Act 2018
1 source controls mapped|1 target controls covered
5%
UK Age Appropriate Design Code (Children's Code)
1 source controls mapped|1 target controls covered
5%

What is UK Online Safety Act 2023 and who does it apply to?

UK Online Safety Act 2023 is a compliance framework from United Kingdom (Ofcom) with 4 domains and 19 controls. The UK Online Safety Act 2023 establishes a comprehensive regulatory framework for online safety, placing duties on user-to-user services and search services to protect users from illegal content and, for larger platforms, content harmful to children. Ofcom is the regulator. Category 1 services (largest platforms with highest risk) face additional duties regarding content harmful to adults, user empowerment, and transparency. The Act covers illegal content duties, child safety duties, fraudulent advertising, and platform transparency. Significant penalties including up to 10% of global revenue. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does UK Online Safety Act 2023 actually require?

UK Online Safety Act 2023 has 19 controls organised across 4 domains. The largest domains are Online Safety Act: Duties of Care (6 controls), Online Safety Act: Communications Offences and Child Protection (5 controls), Online Safety Act: Ofcom Codes and Enforcement (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of UK Online Safety Act 2023 do I already cover?

UK Online Safety Act 2023 maps to 23 other compliance frameworks. The top mapping partners are Australia Online Safety Act 2021 (32% coverage), Australia eSafety Commissioner - Online Safety Expectations for Industry (16% coverage), API 1164 (11% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement UK Online Safety Act 2023?

Start your UK Online Safety Act 2023 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UK Online Safety Act 2023 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 19 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required