If you run a forum, membership group, directory, or any kind of online platform that lets users post, comment, message, or share content then the Online Safety Act 2023 is something you can’t ignore.
Even small, niche communities are caught by this sweeping new law, which is already in force across the UK.
What does the Act actually do?
In short, it introduces new legal duties of care for any online service that hosts user-generated content or allows user interaction. That includes:
- Public or private forums
- Community platforms (like Circle or Mighty Networks)
- Membership sites with commenting or discussion features
- Custom web platforms with chat or posting functionality
- Messaging or support spaces, even if they’re invite-only
And yes, even if you’re a sole trader with 100 members, you might still fall within scope.
You’ll need to start thinking about:
- Content moderation policies
- Risk assessments around illegal and harmful content
- Age assurance if children could access your platform
- Reporting mechanisms for users to flag harmful material
- Terms of use and enforcement procedures
- Document filing with OFCOM by 31 March 2025
Key deadlines you need to know
OFCOM is phasing in key compliance milestones under the Act:
- Illegal content risk assessments were due by 16 March 2025
- Children’s access assessments were due by 16 April 2025
- If your service is likely to be accessed by children, you must complete a children’s risk assessment by 24 July 2025
These assessments are mandatory for in-scope platforms – even smaller ones – and must be documented, even if your platform is low risk.
What’s changed recently?
On 24 April 2025, OFCOM unveiled a series of detailed measures aimed at protecting children online. While many of the requirements are aimed at large platforms, some still apply to smaller services likely to be accessed by children:
- Robust age verification tools
- Filtering harmful content from feeds
- Tools for muting, blocking, and disabling comments
- Rapid takedown processes for harmful content
Platforms need to review whether children could reasonably access their services, even by accident, and take proportionate steps to limit exposure to harmful content.
Why this is hitting small forums hard
The Act’s intentions, protecting people online, especially children, are widely supported. But the reality for small platforms has been difficult.
The law doesn’t distinguish much between tech giants and micro-communities, and the same complex legal obligations are falling on businesses with limited time, money and resources.
This article from The Guardian explores how the Act’s “one-speed-fits-all” approach has placed unrealistic compliance expectations on small, community-led platforms.
One example: the London Fixed Gear and Single-Speed (LFGSS) forum, a thriving cycling community, shut down after stating it couldn’t meet the law’s requirements without major legal and financial investment.
This isn’t an isolated case. Many small forums and support groups are scaling back or closing due to the pressure of compliance.
Support for small platforms
Recognising these challenges, OFCOM has committed to a proportionate
enforcement approach and has published specific guidance for smaller services, including:
- A digital toolkit to help navigate the law
- Templates and checklists for small operators
- Clarity on what’s expected for low-risk, niche, or private communities
OFCOM has made it clear that small services aren’t expected to replicate big tech compliance systems, but they do need to demonstrate awareness, risk assessment, and basic safeguards.
Enforcement is now active
OFCOM has begun enforcing the Online Safety Act. Its first major action launched in April 2025, investigating a suicide forum for failing to protect users from harmful content.
Consequences for non-compliance can include:
- Fines of up to £18 million or 10% of global turnover
- Takedown orders blocking your platform in the UK
- Criminal liability for senior managers who obstruct investigations
Bottom line
This isn’t about censorship, it’s about protecting your platform and staying on the right side of the law. But the Online Safety Act is broad, and small businesses deserve help navigating it without losing their communities.
If you run an online space where users can post, comment or connect then now is the time to review your risks, put clear safety measures in place, and make sure your platform is compliant.
If you’re unsure whether a platform or group you run falls into this new law then speak to us and we will happily talk to you about if you do need to comply and what steps you need to take depending on the community group or platform you run.