On August 28, 2026, Ofcom published an official explanation of its approach to supervising and enforcing the Online Safety Act 2023. The publication describes legally binding information requests, audits, interviews, Skilled Person Reports, warning letters and formal enforcement action.

Ofcom states that it has investigated more than 100 services during the preceding 18 months and has applied fines exceeding GBP 6 million. It also reports practical compliance outcomes, including age-assurance implementation by two high-risk sites and UK access blocking by seven other sites.

The publication does not create new statutory duties; instead, it explains how Ofcom uses existing powers and escalates action where regulated services fail to meet their obligations. Existing requirements concerning risk assessments, children's access, safety measures and record keeping remain applicable.

Impact

Impact assessment: Medium. Key reasons: the publication does not create new duties but demonstrates active supervision and enforcement.

Who is affected?

Regulated online services, platforms, search services and compliance teams.

Conclusion:

providers should maintain evidence demonstrating compliance.