Ofcom demands immediate Online Safety Act compliance despite 2027 rule changes

The regulator's insistence on immediate Online Safety Act compliance prevents streaming and social platforms from pausing safety investments while waiting for the 2027 updates. For the streaming ecosystem, this means technical teams must maintain active risk assessment records and age-gating protocols now, rather than treating safety as a future roadmap item. The upcoming October report on age assurance will likely set the technical benchmark for how platforms must verify user identity to avoid heavy fines. Watch for Ofcom to initiate its first formal enforcement proceedings against non-compliant services before the end of 2026 to establish a precedent.

Ofcom has been steadily building its enforcement posture under the Online Safety Act since the legislation received Royal Assent in October 2023. The regulator published its first set of illegal content codes of practice in December 2024, establishing specific technical and operational expectations for platforms of all sizes. Ofcom's codes of practice require services to conduct risk assessments and implement proportionate safety measures before the end of 2024, creating a baseline that the August 2026 open letter now reinforces as non-negotiable. The regulator has signaled that services failing to meet these baseline duties face fines of up to £18 million or 10% of global annual turnover, whichever is greater.

The business implications extend across the streaming and social media landscape. Ofcom published its first transparency reporting framework in March 2025, requiring designated platforms to disclose content moderation metrics annually, a requirement that applies to major streaming platforms hosting user-generated content alongside licensed programming. The regulator has also been consulting on age assurance standards, with a formal report expected in October 2026 that will likely set technical benchmarks for identity verification. Services that delay investment in age-gating infrastructure pending the 2027 legislative updates now face explicit regulatory risk, as Ofcom's letter makes clear that current obligations are enforceable today regardless of future amendments.

On the technical side, Ofcom's approach aligns with broader international regulatory momentum around platform safety compliance. The EU's Digital Services Act has already triggered enforcement actions against major platforms, with the European Commission opening formal proceedings against TikTok in February 2024 over child safety and addictive design features, establishing a precedent for regulators to act on design-level harms rather than individual content items. Ofcom's framework under the Online Safety Act takes a similar systemic approach, requiring platforms to assess and mitigate risks at the design and algorithmic level. For streaming services with user-generated content features, live chat, or community functions, this means compliance engineering must address recommendation systems, content amplification, and user interaction patterns, not just content moderation pipelines.