British Government Is Planning Internet Regulation

The UK government is preparing to establish a new internet regulator that would make tech firms liable for content published on their platforms and have the power to sanction companies that fail to take down illegal material and hate speech within hours.

Under legislation being drafted by the Home Office and the Department for Digital, Culture, Media and Sport (DCMS) due to be announced this winter, a new regulatory framework for online “social harms” would be created.

BuzzFeed News has obtained details of the proposals, which would see the establishment of an internet regulator similar to Ofcom, which regulates broadcasters, telecoms, and postal communications. Home secretary Sajid Javid and culture secretary Jeremy Wright are considering the introduction of a mandatory code of practice for social media platforms and strict new rules such as "takedown times" forcing websites to remove illegal hate speech within a set timeframe or face penalties.

Ministers are also looking at implementing age verification for users of Facebook, Twitter, and Instagram. A promise to regulate the Internet was buried at the back of the Conservative manifesto for last year's general election. "Some people say that it is not for government to regulate when it comes to technology and the Internet," the manifesto stated. "We disagree."

The new proposals are still in the development stage and are due to be put out for consultation later this year. A spokesperson for the government confirmed it is "considering all options", including a regulator.

The planned regulator would have powers to impose punitive sanctions on social media platforms that fail to remove terrorist content, child abuse images, or hate speech, as well as enforcing new regulations on non-illegal content and behaviour online.

The rules for what constitutes non-illegal content will be the subject of what is likely to be a hotly debated consultation. The regulator would be ultimately accountable to parliament.

Ministers are thought to looking at creating a second new regulator for online advertising. Its powers would include a crackdown on online advertisements for food and soft drink products that are high in salt, fat, or sugar.
Currently, online advertisements are regulated by the Advertising Standards Authority. Government sources have indicated that their frustration that the tech industry has failed to take voluntary action to promote online safety has led them to pursue a mandatory approach.

When the previous culture secretary, Matt Hancock, invited 14 tech companies in for talks on online safety earlier this year, only four firms turned up. Ministers have concluded that the voluntary approach only achieved progress with a few tech giants over specific issues such as terrorist content, and that new laws are required to force smaller and medium-sized social media platforms to take action against a wider range of content.

This will involve producing a single legal framework for internet safety and increasing the legal liability for sites that provide a platform for illegal content.

Social media companies will be forced to sign up to a code of practice and new requirements to assist the police in investigating criminal activity online.

The government is looking at legislation passed in Germany last year requiring social media platforms to remove illegal hate speech within 24 hours or face fines of up to 50 million euros.

The German law was vociferously opposed by human rights groups and industry representatives who warned it would lead to censorship and an unmanageable burden on smaller websites. It encountered problems in its first few months when a satirical magazine and a political street artist had their content blocked.

The government is set to introduce age verification for social media platforms, after ministers raised concerns that children are currently only required to tick a box saying they are over the age of 13. DCMS has previously indicated that it would seek to impose mandatory transparency reports on social media platforms and implement the recommendations of the Law Commission review into online communications. It has also introduced legislation to block pornography sites that refuse to use age verification controls.

The proposal for a new regulator of online social harms will raise significant questions about the government’s ability to make tech firms based outside the UK liable for content that users post on their platforms, how hate speech will be sanctioned, and how to determine what non-illegal content merits state-backed oversight. Concerns have been raised in Whitehall that the regulation of non-illegal content will spark opposition from free speech campaigners and MPs.

There are also fears internally that some of the measures being considered, including blocking websites that do not adhere to the new regulations, are so draconian that they will generate considerable opposition.

Recently, the head of Ofcom, Sharon White, called for tech companies to be regulated in the same way as the mobile phone and broadband industries.

"The boundaries between broadcasting and the online world are being redrawn. This has implications for the public’s understanding of what protections apply online, versus traditional media," White said, arguing that "certain principles from broadcasting regulation could be relevant as policymakers consider issues around online protection".

But doubts have long been raised inside the tech industry as to how state-backed regulation of social media would work, the resources it would require to do so successfully, and whether it is even possible to impose a legal framework on firms headquartered in the US and elsewhere.

A government spokesperson confirmed that the plans would be unveiled later this year. "This winter we will publish a White Paper, setting out new laws to tackle the full range of online harms and set clear responsibilities for tech companies to keep UK citizens safe," they said. "We are considering all options, including what legislation will be necessary and whether a regulator is needed."

Buzzfeed

You Might Also Read:

Regulation Might Actually Protect Facebook:

Bashing Facebook Is Not The Answer To Curbing Russian Influence Operations:

 

 

 

« Europol Warning: 15 Ways To Become A Cybercrime Victim
Chinese Cybercrime Group Launches Destructive Malware Family »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Venafi

Venafi

Venafi is a world-class cyber-security company dedicated to protecting machine identities for our hyper-connected digital economy.

National Trading Standards eCrime Team (NTSeCT) - United Kingdom

National Trading Standards eCrime Team (NTSeCT) - United Kingdom

The National Trading Standards eCrime Team tackles online consumer scams, rip-offs and fraud, as well as those committed by text or email.

Softtek

Softtek

Softtek helps its clients to gain a competitive edge by implementing digital solutions that propel their business strategies.

PFP Cybersecurity

PFP Cybersecurity

PFP provides a SaaS solution for life-cycle protection based on our IoT security platform and power usage analytics.

Oneconsult

Oneconsult

Oneconsult provides cyber security services focusing on penetration tests / ethical hacking, ISO 27001 security audits and incident response & IT forensics.

ECS

ECS

ECS is a leading information technology provider delivering cloud, cybersecurity, software development, IT modernization, and advanced science and engineering services.

Golden Frog

Golden Frog

Golden Frog is a Virtual Private Network services provider offering secure encrypted access to the internet.

Blockchain R&D Hub

Blockchain R&D Hub

Blockchain R&D Hub's mission is to serve the needs of blockchain ecosystem as the center of excellence for technology research and development.

TechRate

TechRate

Techrate is an analytics agency focused on blockchain technology and engineering. Or expertise includes security and technical audits of projects.

CyberUK

CyberUK

CYBERUK is the UK government’s flagship cyber security event and the authoritative event for the UK’s cyber security community.

BT Security

BT Security

BT provides telecommunications and network infrastructure services to keep businesses around the world connected and secure.

HiddenLayer

HiddenLayer

HiddenLayer is a provider of security solutions for machine learning algorithms, models and the data that power them.

Infosec Institute

Infosec Institute

Infosec is a leading cybersecurity training company, we help IT and security professionals advance their careers with skills development and certifications.

Redcoat AI

Redcoat AI

Redcoat AI provide a comprehensive security platform that continuously evolves with the threats and opportunities presented by AI.

Flow Security

Flow Security

Enterprises run on data, Flow secures it at runtime. With a runtime-first approach, Flow is a game-changer in the data security space, securing data itself, beyond the infrastructure it resides in.

Cyabra

Cyabra

Cyabra is leading the fight against disinformation. Our AI shields companies and the public sector by uncovering malicious actors, bot networks, and GenAI content.