Ofcom has published its first codes of practice and guidance under the UK's Online Safety Act, aiming to enhance online safety against illegal harms.

The guidance outlines over 40 safety measures that tech firms must implement by March 2025 to protect users from online threats, including terrorism, hate crimes, and child exploitation.

Tech firms are required to complete illegal harms risk assessments on their platforms, which encompass social media, search engines, and dating apps, by mid-March 2025.

High-risk platforms are mandated to utilize automated detection tools to more effectively identify and remove child sexual abuse material (CSAM).

New measures specifically aim to protect children from online sexual abuse by limiting their visibility to strangers and preventing direct messaging from non-connected accounts.

The guidelines also address online harassment of women and girls, allowing users to block harassers and requiring platforms to remove non-consensual intimate images when reported.

Each provider must designate a senior person responsible for compliance with illegal content and reporting duties, ensuring accountability within their organizations.

Tech firms must establish dedicated reporting channels for fraud-related issues, enabling real-time alerts for scams and fraudulent content.

To improve user safety, tech firms are expected to enhance moderation efforts, making reporting processes easier and ensuring the prompt removal of illegal content, including suicide-related material.

Further consultations on additional safety measures will occur in Spring 2025, with proposals for blocking accounts that share CSAM and enhancing AI use in combating illegal content.

Ofcom has the authority to impose fines up to £18 million or 10% of a firm's global revenue for non-compliance and can seek court orders to block sites in the UK.

The Online Safety Act categorizes over 130 priority offences that tech firms must monitor and mitigate, including terrorism, child exploitation, and fraud.