Ofcom announced on 9 July 2025 that it has contacted certain providers of “user-to-user” and “search” services that are “likely to be accessed by children”, requesting that they submit records of their children’s risk assessments (“CRA”) by 7 August 2025 or face enforcement action.
As noted in our previous blogpost here, in-scope providers have until 24 July 2025 to complete their first CRA—meaning that Ofcom is initiating enforcement on risk assessments early.
Since our last blog post, on 4 July 2025, Ofcom’s final Children Codes of Practice for user-to-user and search services (“Codes”) completed the Parliamentary process and were published. As anticipated, in-scope providers have until 25 July 2025 to comply with children’s safety duties.
Against this backdrop, Ofcom has made clear its intention to continue introducing new measures to implement the Online Safety Act and strengthen the existing Codes and illegal content codes of practice (which were published on 24 February 2025). On 30 June 2025, Ofcom published new proposals aimed at preventing illegal content from going viral, detecting the source of illegal content and protecting children against the risks of livestreaming. Stakeholders have until 20 October 2025 to submit feedback on the proposals.
The Covington team is working with a range of clients on OSA compliance, including preparing risk assessments, and engaging with Ofcom on the OSA. Please reach out to a member of the team if you need assistance with preparing a CRA and/or complying with the Codes.