LegalizeThe Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025
Made: 19th March 2025
Laid before Parliament: 20th March 2025
Coming into force: 3rd November 2025
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PART 1
Citation, commencement, and extent
1
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Interpretation
2
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PART 2 — Registration with the NCA
Registration of a provider of a regulated user-to-user service
3
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Content moderation carried out by another entity or individual
4
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Details to be provided on registration of a provider
5
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appointment of deputy organisation administrator
6
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appointment of authorised person
7
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Restriction for use of account to report to NCA
8
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Requests from the NCA
9
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Notification of cessation of reporting CSEA content to the NCA
10
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Definition of “senior manager”
11
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PART 3 — Contents of report
Requirement for providers to report CSEA content
12
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Requirement for a subsequent report
13
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Priority assessment
14
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Formatting requirements
15
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Manner of sending reports
16
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data protection requirements
17
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Time frame for reporting
18
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PART 4 — Data Retention
Data retention requirements
19
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Retention of records for reports
20
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SCHEDULE 1 — CSEA Information to be included in reports
1
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Interpretation of this Schedule
8
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SCHEDULE 2 — Formatting requirements
1
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Signed
Jess Phillips — Parliamentary Under Secretary of State — Home Office — 19th March 2025
Explanatory note
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Footnotes
[^f00001]: 2023 c.50.
[^f00002]: “CSEA content” is defined in section 59(9) of the Act.
[^f00003]: “NCA” is defined in section 70(7) of the Act.
[^f00004]: “user-to-user service” is defined in section 3 of the Act and “regulated user-to-user service” is defined in section 4(2) of the Act.
[^f00005]: “UK provider” is defined in section 70(2) of the Act.
[^f00006]: “non-UK provider” is defined in section 70(3) of the Act.
[^f00007]: “entity” is defined in section 236(1) of the Act.
[^f00008]: “foreign agency” is defined in section 70(7) of the Act.
[^f00009]: “user” has the meaning given in section 227 of the Act.
[^f00010]: “data protection legislation” is defined in section 3 of the Data Protection Act 2018 c.12, as amended by S.I. 3019/419, schedule 2 paragraph 4(3)(a)--(c).
Editorial notes
Reading this document does not replace reading the official text published on legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. We assume no responsibility for any inaccuracies arising from the conversion of the original CLML XML to this format.
This text is published under legislation.gov.uk's own terms of reuse, not a Legalize or public-domain licence.
legislation.gov.uk
Open Government Licence v3.0 (attribution required)
© Crown and database right. Derived from content available under the Open Government Licence v3.0 from legislation.gov.uk.