Something shifted in early 2026. Scroll through social media now and the experience feels subtly different from even 12 months ago. Content that once circulated freely is being removed faster. Age-verification prompts are appearing on platforms that previously ignored them. And if you report something genuinely harmful, there is a growing chance that something actually happens. That change has a name: Ofcom Online Safety Act UK enforcement, moving from theory into practice.
The Online Safety Act received Royal Assent in October 2023, but it spent much of 2024 and 2025 in the background while Ofcom consulted, drafted codes of practice, and set deadlines. From the start of 2026, those deadlines began to bite. Platforms have had to submit their first illegal harms risk assessments, and Ofcom has made clear it will use its full investigatory and financial powers against those that fall short. The regulator can impose fines of up to £18 million or 10% of global annual turnover, whichever is higher. For a company like Meta, that second figure is enormous. That creates a very different set of incentives compared to the pre-Act era of voluntary content policies and vague promises.
What platforms are actually required to do
The Act splits platforms into categories. The largest and highest-risk services carry the heaviest duties. These include things like Meta’s Facebook and Instagram, TikTok, X (formerly Twitter), Snapchat, and YouTube. They must assess and mitigate risks from illegal content, including child sexual abuse material, terrorism content, fraud, and hate speech. They are also required to protect children from harmful but not necessarily illegal content, which covers material promoting self-harm, extreme dieting, and age-inappropriate violence.
Smaller platforms are not off the hook either, but their obligations are lighter. User-to-user services with fewer than one million monthly UK users still have duties around illegal content, but the compliance burden scales down accordingly. Ofcom has published detailed guidance and codes of practice on its official Online Safety hub that set out exactly what each tier of service must do, and those documents are surprisingly readable if you want to understand the mechanics.
How enforcement is visibly changing the experience
The most immediate thing British users are noticing is age assurance. Platforms that host pornographic content now face a hard legal requirement to ensure under-18s cannot access it. Services that relied on a simple “click here to confirm you are 18” tick box have had to move towards more robust verification, whether through credit card checks, mobile network operator data, or facial age estimation tools. This is not theoretical. Several adult content platforms geo-restricted or withdrew UK access in late 2025 rather than implement the required checks.
Content moderation on the mainstream platforms has also become noticeably more active. TikTok and Instagram, in particular, have increased the speed at which flagged content is reviewed, partly because Ofcom’s codes require platforms to have clear and functional reporting mechanisms with measurable response times. The knock-on effect is real: videos and posts that might have stayed up for days are now reviewed within hours. For creators, that brings a new set of anxieties about false positives and opaque appeals processes. For users who have been on the receiving end of harassment or targeted abuse, it is, frankly, overdue.
There is also a transparency dimension. Platforms operating in the UK must now publish annual transparency reports covering how many pieces of content were removed, why, and what happened when users appealed. Those reports give researchers, journalists, and regulators a level of data that simply did not exist before. Whether the platforms report honestly is a separate question, but the legal obligation to report at all is significant.
What this means if you report harmful content
One of the most practical changes for ordinary UK users is around reporting. Previously, sending a report into the void of Meta or TikTok’s moderation queue felt like putting a message in a bottle. Under the Act, platforms must have accessible, easy-to-use reporting tools and must process reports in a timely way. They must also give users a right to appeal content removal decisions and to complain if their reports are ignored.
Ofcom can receive complaints directly from users if they believe a platform has breached its duties. This is not a quick individual remedy (Ofcom investigates systemic failures, not individual cases), but it does mean that patterns of ignored reports can form the basis of a regulatory investigation. That is a genuine structural change in accountability.
It is worth noting that the Act has not resolved every concern. Civil liberties groups including the Open Rights Group have raised questions about how broadly “harmful” content gets defined and whether aggressive enforcement creates pressure for over-removal that chills legitimate speech. Those tensions are real and ongoing. The law does try to balance harm reduction against freedom of expression, but where exactly that line sits will be tested through enforcement decisions and, eventually, court cases.
The wider context: how this connects to daily British life
The Online Safety Act does not sit in isolation. It is part of a broader pattern in which UK institutions are actively reshaping digital spaces that intersect with people’s everyday lives. The same impulse is visible in how Ofgem is pressing energy companies on consumer protection (a topic worth reading about if you are following the Ofgem rules affecting UK households), or in how town centres are adapting their physical and digital presence, as we covered when looking at which British high streets are thriving in 2026.
Social media is now part of the infrastructure of daily life in the UK. According to Ofcom’s own research, 92% of UK adults use at least one social media platform. At that scale, how these platforms operate is not a niche tech question. It affects how people get news, how they communicate with family, how they shop, how they organise communities. The Act’s enforcement is, in that sense, as significant as any other piece of consumer regulation.
For British users right now, the most useful thing is to know your rights. You can report harmful content and expect a platform to act on it. You can appeal if your own content is removed unfairly. And if you believe a platform is systematically ignoring its duties, Ofcom is the body to tell. The enforcement machine is slow, but it is running. That is a meaningful difference from where we were two years ago.
Frequently Asked Questions
What is the Online Safety Act and how does Ofcom enforce it?
The Online Safety Act 2023 is UK legislation that places legal duties on social media platforms and other online services to protect users from illegal and harmful content. Ofcom acts as the regulator, with powers to investigate platforms, demand information, and issue fines of up to £18 million or 10% of global annual turnover for breaches.
Which social media platforms does the Online Safety Act apply to in the UK?
The Act applies to any platform that hosts user-generated content or facilitates communication between users and has links to the UK. This includes Facebook, Instagram, TikTok, X, YouTube, Snapchat, and many smaller services. Platforms are tiered by size and risk level, with the largest carrying the heaviest compliance duties.
How does the Online Safety Act affect children's access to social media in the UK?
Platforms must implement age assurance measures to prevent under-18s from accessing harmful or age-inappropriate content, including pornography. This goes beyond a simple tick-box confirmation; more robust verification methods are now required. Several adult content platforms withdrew UK access in late 2025 rather than comply.
What can I do if a social media platform ignores my report of harmful content?
Under the Act, platforms must have clear reporting mechanisms and must process reports within a reasonable timeframe. If you believe a platform is systematically failing to act, you can raise a complaint with Ofcom, which investigates systemic breaches rather than individual cases.