Online Safety Bill: A compliance headache for tech firms
Guest blog: Ben Packer (Partner) and Jemma Purslow (Managing Associate), Linklaters, discuss key takeaways from the draft Online Safety Bill and why services should act now to be ready for compliance.
The UK government published its draft Online Safety Bill in May this year, setting out its ambitious new framework to protect users against harmful content online. Much of the Bill reflects the Government’s previously announced position but it does include new obligations applicable to services with the widest reach (‘Category 1’), adding to their already substantial compliance burden.
Wide range of duties applicable to all
Broadly, all search engines and services which allow user interaction will need to:
- Conduct risk assessments to understand the risk of harm to users from illegal content and implement systems and processes to protect users against illegal content;
- Conduct regular compliance reviews, and keep records of all risk assessments and steps taken to comply with their obligations;
- Have regard to freedom of expression and user privacy when designing systems and processes;
- Have effective user reporting and complaints mechanisms; and
- Have clear and accessible T&Cs and apply those consistently.
All services will need to determine if they are likely to be accessed by children and, if so, conduct risk assessments to understand the risk of harm to children from harmful content and implement systems and processes to protect children against such content.
Services whose worldwide revenue is at least equal to a threshold set by Ofcom (and approved by the Secretary of State) will need to notify Ofcom and pay an annual fee.
Additional duties for Category 1 services
Category 1 services will also be required to conduct risk assessments to understand the risk of harm to adult users from lawful but harmful content and specify in T&Cs how they will deal with such content. They will also be required to produce an annual transparency report that meets criteria set by Ofcom.
The Bill introduced duties for Category 1 services that had not previously been detailed, requiring them to:
- Periodically assess the impact of new and existing policies on the protection of freedom of expression and user privacy;
- Design systems and processes to ensure free expression of content of ‘democratic importance’ and journalistic content is given due consideration when deciding how to treat content and users; and
- Have a dedicated and expedited complaints procedure for journalistic content.
Possible senior management liability
The Bill includes a criminal offence for senior managers, but this will not be introduced for at least two years after the regime is fully operational and only if services do not ‘step up their efforts to improve safety’. Even if individual liability is introduced, it will only apply if companies do not comply with Ofcom’s information requests.
However, the Bill does introduce a criminal offence for ‘officers’ (who are, or purport to be, a director, manager, secretary or other officer) where the officer has consented or connived with a service’s failure to comply with Ofcom’s information requests.
Be ready, act now
Complying with this regime alone would be a major undertaking for many services. Yet this is just one of many regulatory regimes either in effect or being developed across the globe. Putting in place systems and processes that can comply with each regime, while maintaining a broadly consistent user experience, is a challenge that services will need to begin tackling sooner rather than later.
While preparation is key, lack of detail in the Bill in key areas - such as what constitutes harmful content and the thresholds for category 1 services – means that platforms will not be able to fully prepare until the legislation is in final form. Services will therefore need to maintain some flexibility when planning their compliance regimes at this stage.
Latest News from
Demystifying the Smart City - working towards better implementation28/06/2022 14:05:00
techUK, in collaboration with its Smart City Working Group, has published a new report which outlines how cities and technology businesses are rethinking the approach to planning and delivering smart cities to overcome complexity and drive step changes in public service and infrastructure provision.
Social Care Innovation Hub to launch soon28/06/2022 13:05:00
techUK’s Social Care Innovation Hub will showcase the innovative work of our members and serve as a valuable resource for organisations across industry and beyond.
Guest blog: Getting digital competition right will drive growth and innovation across the UK27/06/2022 16:25:00
Guest blog by Drew Smith, Government Relations Manager, UK & Ireland at Zoom Video Communications.
Guest Report: Impact of the Russia-Ukraine crisis on the Technology sector27/06/2022 15:33:00
Dun & Bradstreet map the business impact for tech companies who have had operations in Russia and Ukraine.
Mayor of London launches Digital Inclusion Service24/06/2022 16:25:00
How can techUK members and industry be part of the Digital Inclusion Service?
Is the UK ready for the future of compute?21/06/2022 13:05:00
We are at an exciting juncture for technology and innovation in the UK. The Government’s future of compute review, launched during London Tech Week, foresees a world where nearly every aspect of business and research is transformed by the rapid growth in computing capabilities.
Carbon Saving Strategy Guide (Guest Blog from Climax Community)21/06/2022 11:25:00
Guest blog from Climax Community outlines ways to reduce your businesses carbon footprint
Ministry of Defence publishes Artificial Intelligence Strategy20/06/2022 15:20:00
The Ministry of Defence has published its new Defence Artificial Intelligence (AI) Strategy, which sets out how it will adopt and exploit AI technologies, and become the world’s most effective, efficient, trusted and influential Defence organisation for its size in AI
The power of collaboration: Technology’s role in tackling the challenges of VAWG and RASSO20/06/2022 11:05:00
At last month’s Police Digital Summit in the UK, a panel of police, tech specialists and criminal justice stakeholders discussed how technology could help to meet the challenges of rape and serious sexual offences, and violence against women and girls; techUK’s Georgie Henley, who chaired the panel, highlights some of the key points from the discussion, and the collaborative approaches that can ensure improved responses in the future.