Ofcom updated its 'Important dates for Online Safety compliance' guidance on August 24, 2026, consolidating current expected milestones under the Online Safety Act 2023. The roadmap indicates that Ofcom expects to publish the 2026/27 tariff and issue invoices to fee-liable providers in September 2026.

Subject to the categorised-services framework, Category 1 and Category 2A providers are expected to provide Ofcom with up-to-date risk-assessment records in October 2026 and publish risk-assessment summaries in November 2026.

Ofcom also links to two active categorised-service consultations: the Category 1 additional-duties consultation and the Fraudulent Advertising Codes of Practice consultation, both of which close at 5pm on October 2, 2026.

The Category 1 proposals address user empowerment, identity verification, relevant content, terms of service, complaints and freedom-of-expression/privacy impact assessments; the fraudulent-advertising proposals concern paid-for advertising on Category 1 and Category 2A services.

Ofcom expressly cautions that several roadmap dates remain expected timings and may change as implementation progresses.

Impact assessment: Medium.

The update consolidates material near-term compliance milestones and active consultations affecting categorised online services.

Key reasons:

Fee actions are expected in September, risk-assessment record and publication milestones follow in October/November, and both key consultations close on October 2, 2026.

Who is affected?

Category 1/2A services, fee-liable providers, user-to-user platforms and search services.

Conclusion:

affected providers should validate internal compliance calendars and submit consultation responses where relevant, while monitoring Ofcom for timing changes.