Online Safety Act Dating Compliance Guide 2026

What is the Online Safety Act?

The Online Safety Act (OSA) is UK legislation that fundamentally changed how online platforms operate. It came into effect in phases starting in 2023, with full compliance required by late 2024 and beyond.

The Act applies to "user-generated content services" - which includes dating platforms. It's designed to protect users from illegal content, particularly child sexual abuse material (CSAM), and from harmful content and behavior.

Unlike GDPR, which focuses on data privacy, the OSA focuses on user safety and platform accountability. Ofcom, the UK's media regulator, oversees compliance.

Who Does It Apply To?

The OSA applies if you operate a dating platform that:

• Allows user-generated content (including profiles, messages, photos)
• Has UK users
• Isn't just a user-to-user communication service (like WhatsApp)

Service size matters under the OSA. Platforms fall into different categories based on the number of users and reach:

• Very large online platforms (over 24 million monthly active users in the UK)
• Large platforms (10 million+ users)
• Smaller platforms

Dating sites almost always meet the threshold, meaning full OSA compliance applies.

Key Duties for Dating Platforms

The Core Duties

1. Illegal Content Duty You must take reasonable steps to remove illegal content within a reasonable timescale. For dating sites, this includes:

• Child sexual abuse material
• Non-consensual intimate images
• Fraud and scam content
• Other criminal material

You don't need to actively hunt for it, but you need responsive systems when users report it.

2. Duty of Care to Children You must assess how your service could harm children and take steps to mitigate those harms. For dating platforms, this means:

• Age verification systems
• Controls to prevent adults contacting minors
• Content filtering
• Safety information for young users

3. Duty of Care to Adults Large platforms must also address harms to adults, including romance scams, harassment, and exploitation.

4. Transparency and Reporting You must publish transparency reports about your content removal and handling of user reports.

Risk Assessment Requirements

You need to conduct documented risk assessments covering:

• What illegal content could appear on your platform
• How children might be harmed
• How adults might face harmful content
• Your current mitigation measures
• Gaps in your safety systems

This assessment must be in writing and updated regularly. Ofcom will ask to see it.

Age Assurance Requirements

The OSA requires age assurance for services that are age-restricted. Most dating platforms require users to be 18+, which makes this critical.

!UK Online Safety Act compliance timeline and requirements *UK Online Safety Act compliance timeline and requirements*

What Counts as Age Assurance?

Self-declaration alone is not sufficient for Ofcom. You need one of:

Document-based verification - Users upload ID documents (passport, driving license). Third parties like Yoti or Veriff verify these.

Digital verification - Systems like Veriff use facial recognition and liveness checks, comparing the user's face to their ID document.

Estimation technology - AI analyzes photos to estimate age. Less reliable but acceptable as layered approach.

Credit/debit card checks - Users provide payment card details, which implicitly verifies their age (since you must be 18+ to have a card).

Most dating platforms use a combination: payment card as primary, with optional document verification for free users or when needed.

Implementation Considerations

Document verification typically costs 50p-2 per verification. Free dating platforms need document-based age assurance.

Processing times vary - document checks usually complete within minutes to 24 hours.

You need clear privacy policies explaining how ID documents are used and deleted (typically within 30 days of verification).

Content Removal Obligations

Illegal Content

You need written procedures for:

• How users report illegal content
• How you assess reported content
• Timescales for removal (Ofcom expects "without undue delay")
• How you handle reporter privacy
• Whether you report to the National Center for Missing and Exploited Children (NCMEC) or law enforcement

For CSAM, you must report to NCMEC and consider disabling accounts of those uploading it.

For other serious crimes, consider reporting to the National Crime Agency (NCA) or local law enforcement.

Harmful Content

Harmful content (like romance scam warnings, harassment) isn't necessarily illegal, but you should have policies for escalation and user support.

Timeline and Deadlines

Here's the key timeline for dating platforms:

If you missed early deadlines, compliance is still required - Ofcom is transitioning into enforcement.

Penalties and Enforcement

Ofcom can issue:

!Age verification methods for dating sites: document, facial recognition, and payment card verification *Age verification methods for dating sites: document, facial recognition, and payment card verification*

• Civil penalties up to 6% of annual revenue (whichever is higher) or 5 million GBP
• Criminal penalties for obstruction of investigations
• Service suspension orders - requiring you to restrict access from UK users
• Undertakings - formal agreements to change practices

For a platform making 10 million GBP annually, 6% is 600,000 GBP.

Enforcement focuses on those not taking action, rather than those with good-faith attempts to comply.

Implementation Steps

Month 1: Foundation

• Review the OSA and Ofcom guidance
• Audit your current safety measures
• Identify gaps (age verification, reporting, removal procedures)
• Assign compliance responsibility

Month 2: Risk Assessment

• Document what illegal and harmful content could appear on your platform
• Assess your mitigation measures
• Identify child and adult safety risks
• Write your risk assessment

Month 3-4: Build Systems

• Integrate age verification (Yoti, Veriff, or similar) - see detailed guide on age verification options
• Build or integrate content reporting systems (refer to user reporting systems guide)
• Create content removal workflows per moderation strategy
• Train support teams on building a moderation team

Month 5: Policies and Publishing

• Draft terms of service covering illegal content
• Create safety policies for children
• Write transparency reports
• Publish everything on your site

Month 6+: Operations and Monitoring

• Monitor compliance regularly
• Keep records of removals
• Update risk assessments as your platform changes
• Prepare for Ofcom inquiries

Key Takeaways

1. The Online Safety Act is law in the UK. Dating platforms must comply or face penalties up to 6% of revenue.

1. Core duties include removing illegal content, protecting children, and maintaining transparent procedures.

1. Age assurance must go beyond self-declaration - document verification, digital verification, or payment card checks are required.

1. Risk assessments must be documented and kept current. Ofcom will ask to review them.

1. Most dating platforms need layered safety measures: age verification, content moderation, user reporting, and escalation to law enforcement for serious crimes.

1. Compliance requires ongoing effort, not a one-time setup. Your terms, policies, and procedures must stay current.

1. Early, good-faith compliance matters to regulators. Platforms making genuine efforts face less scrutiny than those ignoring requirements.

Cross-Links

• Age Verification for Dating Sites: Requirements and Solutions
• Content Moderation for Dating Sites: Tools and Strategies
• How to Prevent Romance Scams on Your Dating Platform