Online Safety Regulations and Compliance in 2024

In 2023, the UK’s Online Safety Act (OSA) received Royal Assent, paving the way for significant changes in online safety regulations. The designated online safety regulator, Ofcom, is working diligently to bring the OSA into effect in 2024. Ofcom is taking a phased approach to implementation, with consultations on draft guidance and codes of practice already underway for the first phase, which covers illegal harms. These consultations are expected to be finalized in the autumn of 2024.

2024 is set to be a busy year for online safety in the UK, with Ofcom planning to launch consultations on the second phase of implementation (covering child safety duties) in the spring. The third phase, which covers transparency, user empowerment, and other duties on “categorised services,” will kick off with a call for evidence in early 2024, followed by a consultation on draft transparency guidance later in the year. Businesses will need to complete their illegal content risk assessments within a three-month period, likely starting in the last quarter of 2024.

In addition to the OSA, new legislation is on the horizon in the UK. The Data Protection and Digital Information Bill and the Digital Markets, Competition, and Consumer Bill aim to simplify data protection laws and strengthen consumer protection. The Media Bill will reform public service broadcasting and video-on-demand laws. The government expects all three bills to become law in 2024.

Meanwhile, in the EU, new obligations are also coming into force. The Digital Services Act and Digital Markets Act aim to protect online users from illegal and harmful content and regulate large providers designated as “gatekeepers.” The EU’s Data Act, which introduces extensive new rules around data sharing, will become law in January 2024.

Businesses offering digital products, services, and platforms in the UK will need to prepare for compliance with these new regulations in 2024 and beyond. With the evolving technology landscape, particularly in AI, privacy issues will continue to be a focus for regulators and lawmakers. Compliance with multiple regulatory regimes, including those in the UK and the EU, will require careful planning and resource allocation to ensure adherence to the new standards and regulations.