British Online Safety Act Is Now Law

The UK government's controversial Online Safety Bill, which aims to make the Internet safer for children, became law at the beginning of November. The new Law aims to force technology firms to take more responsibility for the content on their platforms.

It will be overseen by Ofcom and take a zero-tolerance approach to protecting children from online harm, while empowering adults with more choices over what they see online

The law imposes a statutory obligation on certain Online Service Providers (OSPs) to comply with protective measures and requirements in respect of users.

As such, OSPs will be expected to assess and mitigate the risks of harmful illegal content. This follows rigorous scrutiny discussion within the UK House of Commons and the House of Lords. “Today will go down as an historic moment that ensures the online safety of British society not only now, but for decades to come,” said Michelle Donelan, the technology secretary as it "ensures the online safety of British society not only now, but for decades to come."

While the principal aim of the legislation is to protect children, there have been widespread concerns about the implications for privacy.

What is the Online Safety Bill?

The Law unambiguously places the responsibility to protect children from some legal but harmful material on the firms operating online platforms, with the UK regulator, Ofcom, given enforcement powers including powers to levy significant penalties. It introduces new rules - including a requirement for porn websites sites to protect stop children from explicit content using age verification. Platforms will also need to show they are committed to removing illegal content including:

  • Child sexual abuse
  • Controlling or coercive behaviour
  • Extreme sexual violence
  • Illegal immigration and people smuggling
  • Promoting or facilitating suicide
  • Promoting self-harm
  • Animal cruelty
  • Selling illegal drugs or weapons
  • Terrorism

Various entirely new offences have been created, including cyber-flashing - sending unsolicited sexual imagery online, sharing deepfake pornography. and measures enabling bereaved parents to obtain information about their children from online platforms. Under the act Ofcom has powers to compel messaging services to examine the contents of encrypted messages for child abuse material have proved especially controversial.

Failing to comply with the act’s rules could land companies with fines of up to £18 million or around $22 million, or 10 percent of their global annual turnover, whichever is higher, and their bosses could even face prison.

“The Online Safety Act’s strongest protections are for children. Social media companies will be held to account for the appalling scale of child sexual abuse occurring on their platforms and our children will be safer,” said Home Secretary Suella Braverman. “We are determined to combat the evil of child sexual exploitation wherever it is found, and this Act is a big step forward.”

In response, social media platforms including WhatsApp, Signal and iMessage say they cannot access or view anybody's messages without destroying existing privacy protections for all users and have threatened to leave the UK rather than compromise message security. WhatsApp has threatened to withdraw it service from the UK market. 

Gov.UK:      PWC:      BBC:    Independent:    The Verge:     UKTech:       Image: finelightarts

You Might Also Read: 

Online Safety Bill UK: WhatsApp, Encryption & The Implications For Privacy:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Attack On Chinese Bank Disrupts Financial Trading
API Security Is A Critical Boardroom Issue »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Omerta

Omerta

Omerta is a global security technology and services company. We advise, consult, design, build, mitigate, protect, manage, provide and train to protect from increasing cyber threats.

Globalscape

Globalscape

Globalscape is a leader in secure data exchange solutions.

CIRCL

CIRCL

CIRCL is the national Computer Incident Response Center of Luxembourg

Computer & Communications Industry Association (CCIA)

Computer & Communications Industry Association (CCIA)

CCIA supports efforts to facilitate and streamline information sharing on cyber threats between the private sector and the Federal Government.

CLDigital

CLDigital

CLDigital's no-code risk and resilience platform, CL360, provides leaders with risk and resilience data to make strategic and tactical continuity decisions.

PRODAFT

PRODAFT

PRODAFT, Proactive Defense Against Future Threats, is a cyber security and cyber intelligence company providing solutions to commercial customers and government institutions.

Alyne

Alyne

Alyne is a Munich based 2B RegTech offering organisations risk insight capabilities through a Software as a Service.

Smart Contract Security Alliance

Smart Contract Security Alliance

The Smart Contract Security Alliance supports the blockchain ecosystem by building standards for smart contract security and smart contract audits.

HB-Technologies

HB-Technologies

HB-Technologies is pioneer in Africa, in digital security, embedded electronic and IT solutions based on highly secure smart cards that comply with international standards and norms.

Intersistemi Italia

Intersistemi Italia

Intersistemi is a leading Italian company in the field of information technology integration and digital transformation including cybersecurity.

National Security Services Group (NSSG) - Oman

National Security Services Group (NSSG) - Oman

National Security Services Group (NSSG) is Oman's leading and only proprietary Cybersecurity consultancy firm and Managed Security Services Provider.

C3.ai Digital Transformation Institute

C3.ai Digital Transformation Institute

The C3.ai Digital Transformation Institute is a research consortium dedicated to accelerating the benefits of artificial intelligence for business, government, and society.

Aleo

Aleo

Aleo is building the world's leading developer platform for enabling absolute privacy on blockchains.

BugProve

BugProve

BugProve offers a firmware analysis tool that speeds up security testing processes and supports compliance needs by automating repetitive tasks and detecting 0-day vulnerabilities.

VeriBOM

VeriBOM

VeriBOM is a SaaS security and compliance platform that helps protect you and your customers through automation, documentation, and transparency for every software application you build or run.

HanaByte

HanaByte

HanaByte is a security consultancy focused on delivering state of the art solutions in the cloud. We specialize in delivering cloud services with an emphasis on security.