What should teams do about Age Assurance under the UK Online Safety Act?
Teams should treat Age Assurance under the UK Online Safety Act as a source-linked operating decision: confirm whether the service is in scope and which provider duty is triggered for illegal content, children safety, age assurance, user empowerment, transparency, complaints, or risk assessment, assign the team that can change the process, and keep evidence showing the action and review trigger.
The safest first step is to classify the service, user-to-user/search functionality, child-access status, illegal-content risk, and Ofcom code mapping before assigning the Online Safety Act action.
- Write the Age Assurance decision in one sentence before drafting controls.
- Attach the external source URL and a short source quote to the evidence record.
- Route unclear cases to legal, privacy, security, or compliance review before launch.
GOV.UK policy source for risk- and evidence-based online safety priorities that support age-assurance operating decisions.
Direct support for the FAQ answer on Age Assurance.
Direct support for the FAQ answer on Age Assurance.