Artifact GuideUKModeration and Appeals

UK Online Safety Act Moderation and Appeals

Regulated services need moderation, reporting, and complaints systems that match their assessed risks and the duties applying to their service type.

This guide separates content reports from complaints, explains what an upheld complaint requires, and shows how terms and operational evidence fit together.

Author
Sorena AI
Published
May 9, 2026
Updated
Jul 24, 2026
Questions
3

Structured answer sets in this page tree.

Primary sources
9

Cited legal and guidance references.

Publication metadata
Sorena AI
Published May 9, 2026
Updated Jul 24, 2026
Overview

The Online Safety Act does not impose one universal moderation rule or a single appeal model. User-to-user and search services have different safety duties, but both need an accessible and content-reporting route for specified issues. The provider must take appropriate action when a complaint is upheld and keep its public rules aligned with the system in use.

Search this module

Find a question or answer quickly

3 of 3 questions
Question 1

What moderation outcomes does the Act require?

For illegal content, user-to-user services need proportionate systems and processes designed to prevent users encountering , mitigate identified risks, minimise how long priority illegal content remains, and swiftly take down illegal content when the provider becomes aware of it. Search services must minimise the risk of users encountering priority illegal content and known illegal content in or via search results.

Services likely to be accessed by children have additional duties for content harmful to children. The exact moderation design depends on the service, assessed risks, applicable duties, and Ofcom codes. Measures can include detection, triage, human review, removal, visibility reduction, recommendation controls, account action, user support, and escalation, but each measure must be justified and tested in context.

  • Map each content class and risk to a detection route, decision rule, response target, reviewer, escalation path, and user-facing outcome.
  • Test automated systems for accuracy and bias, and give reviewers enough context and authority to correct errors.
  • Keep urgent routes for child sexual abuse material, terrorism content, imminent danger, and other cases requiring specialist handling or reporting.
Citations
Question 2

How do content reports and complaints differ?

A lets users and other eligible people notify the provider about content of a kind covered by the Act. A covers specified complaints about content, the provider's compliance, and certain provider decisions. For user-to-user services, sections 20 and 21 govern these duties; sections 31 and 32 cover search services.

The must allow relevant complaints, provide for appropriate action when a complaint is upheld, be easy to access and use, including by children, and be transparent. Appropriate action depends on the case. It may include removing illegal content, correcting a restriction, reinstating content removed in error, or changing an account decision. The Act does not require every complaint to produce the user's preferred result.

  • Keep reporting and complaints entry points clear, even if one intake form routes users behind the scenes.
  • Tell users what they can complain about, what information is needed, how the service will communicate, and what outcomes are possible.
  • Record the original decision, evidence, rule applied, reviewer, outcome, action taken, and any policy or model feedback.
Citations
Online Safety Act 2023

Sets user-to-user complaints duties, relevant complaint types, accessibility, transparency, and appropriate action.

Question 3

What should terms, metrics, and governance show?

User-to-user terms must explain how users are protected from illegal content and set out the complaints policies and procedures required by the Act. Search services must make the corresponding illegal-content statement and complaints information public. Providers must apply stated provisions consistently.

Useful evidence includes moderation guidance, training, quality sampling, model and rule versions, error analysis, response times, reversals, repeat reports, systemic issues, staffing and language coverage, vendor oversight, child accessibility, and remediation. Metrics need stable definitions and should distinguish reports, pieces of content, decisions, accounts, complaints, and successful complaints.

  • Reconcile written terms, moderator guidance, product labels, enforcement reasons, and complaint outcomes after every policy change.
  • Track error and reversal rates by content class, language, age group where lawful and appropriate, and decision method.
  • Escalate repeated reversals or reporting failures into the risk assessment and control-review process.
Citations
Primary sources

References and citations

legislation.gov.uk
Referenced sections
  • Sets user-to-user complaints duties, relevant complaint types, accessibility, transparency, and appropriate action.
legislation.gov.uk
Referenced sections
  • Sets the user-to-user illegal-content safety duties.
legislation.gov.uk
Referenced sections
  • Sets the search-service illegal-content safety duties.
legislation.gov.uk
Referenced sections
  • Sets user-to-user content-reporting duties and eligible reporters.
Related guides

Explore more topics

Does the UK Online Safety Act apply to this service?
A practical scope test for user-to-user, search, and provider-pornography services under the UK Online Safety Act, including UK links and exemptions.
How Ofcom and ICO duties overlap for online services
How the UK Online Safety Act, UK GDPR, Data Protection Act 2018, and Children's Code apply together to safety technologies and children's data.
How Ofcom enforces the UK Online Safety Act
Ofcom information notices, investigations, representations, confirmation decisions, penalties, remediation, and court-based service restrictions.
How to complete a children's access assessment
The two-stage UK Online Safety Act children's access assessment, evidence, timing, reassessment triggers, and next duties.
How to complete an illegal content risk assessment
UK Online Safety Act illegal content risk assessment scope, required elements, deadlines, review triggers, records, and resulting safety measures.
Is This a User-to-user or Search Service Under the UK Online Safety Act?
Classify user-to-user, search, and combined services under the UK Online Safety Act, apply the UK-links and exemption tests, and identify the next duties.
Ofcom Transparency Reporting FAQ
Who receives Ofcom transparency notices, what Schedule 8 can require, the 2026 notice process, first-report timing, and evidence controls.
Online Safety Act Children's Access Assessment
Decide whether children are likely to access a regulated service or part of it, document the evidence, and identify when a children's risk assessment follows.
Online Safety Act Complaints Handling Workflow
Route and decide Online Safety Act complaints, record the required response, and distinguish an internal review from an Ofcom complaint or super-complaint.
Online Safety Act Illegal Content Risk Assessment
Assess illegal-content risks by offence kind, likelihood, severity, affected users, service design, controls, evidence, and review triggers.
Online Safety Act: User-to-user and Search Service Scope
Decide whether an online service is a regulated user-to-user service, search service, combined service, or exempt service under the UK Online Safety Act.
UK Online Safety Act Age Assurance Options
Compare age verification and age estimation methods by assurance, privacy, accessibility, bias, evasion risk, and operational evidence.
UK Online Safety Act Age Assurance Requirements
When Online Safety Act services need age assurance, what highly effective age assurance means, and how safety duties interact with data protection.
UK Online Safety Act Age Assurance Selection Workflow
Choose an age-assurance method for an Online Safety Act duty by testing effectiveness, privacy, accessibility, evasion risk, and the consequence of error.
UK Online Safety Act Applicability Test Guide
Test whether a service is covered by the UK Online Safety Act by checking service functionality, UK links, exemptions, and the duties that follow.
UK Online Safety Act categories: thresholds and duties
How Category 1, 2A, and 2B thresholds work, how Ofcom categorises services, and what the July 2026 register means.
UK Online Safety Act Categorisation Guide
Apply the UK Online Safety Act Category 1, 2A, and 2B thresholds, calculate active UK users, and use Ofcom's register published in June 2026 and updated in July.
UK Online Safety Act Checklist
Verify UK Online Safety Act scope, assessments, controls, reporting, complaints, records, child safety, and category-specific work.
UK Online Safety Act Children's Safety Duties Guide
Apply the UK Online Safety Act children's access, risk-assessment, safety, age-assurance, reporting, complaints, and record-keeping duties.
UK Online Safety Act Compliance Guide
Build a UK Online Safety Act compliance program from service scope through assessments, controls, evidence, review, and Ofcom response.
UK Online Safety Act Content Moderation and Appeals Guide
Design UK Online Safety Act moderation, content-reporting, complaints, and review processes for illegal content and content harmful to children.
UK Online Safety Act Deadlines and Compliance Calendar Guide
UK Online Safety Act compliance dates for risk assessments, child safety, categorised services, fees, and event-based deadlines.
UK Online Safety Act Enforcement and Penalties Guide
How Ofcom investigates Online Safety Act breaches, issues decisions, requires remedies, imposes penalties, and seeks court orders.
UK Online Safety Act FAQ: scope, duties, and deadlines
Standalone answers and decision paths for UK Online Safety Act scope, risk assessments, child protection, age assurance, categories, reporting, and enforcement.
UK Online Safety Act ICO Overlap Guide
Apply the Online Safety Act and UK data protection law together for age assurance, moderation, profiling, recommender systems, and safety-data sharing.
UK Online Safety Act Illegal Content Duties Explained
Understand the illegal-content risk assessment, safety, reporting, complaints, record-keeping, and review duties for regulated user-to-user and search services.
UK Online Safety Act Moderation, Complaints and Appeals
Build moderation, content-reporting, and complaints procedures for regulated services, and understand where the Online Safety Act does and does not require an appeal.
UK Online Safety Act Ofcom Enforcement Guide
How Ofcom assesses Online Safety Act concerns, gathers information, investigates suspected breaches, and reaches enforcement decisions.
UK Online Safety Act Penalties and Fines Guide
The Online Safety Act penalty ceiling, qualifying worldwide revenue, daily penalties, penalty factors, and payment consequences.
UK Online Safety Act Regulated Service Scope Guide
Understand which user-to-user, search, combined, and provider-pornography services the UK Online Safety Act regulates and which exemptions narrow scope.
UK Online Safety Act Requirements Guide
See which UK Online Safety Act requirements apply to Part 3 services, child-accessible services, provider pornography, and categorised services.
UK Online Safety Act Risk Assessment Template
A field-by-field template for recording service facts, statutory risks, evidence, controls, residual risk, approval, and reassessment triggers.
UK Online Safety Act Risk Assessment Workflow
Run illegal-content and children's risk assessments in the right order, with evidence for risks, controls, governance, and reassessment triggers.
UK Online Safety Act Risk Assessments Playbook
Organise recurring Online Safety Act risk assessments across product, safety, data, engineering, legal, and governance teams.
UK Online Safety Act Senior Manager Liability Explained
Understand when a named senior manager or corporate officer can face personal liability for Online Safety Act information offences and how to control the risk.
UK Online Safety Act Service Classification Workflow
Decide whether a service is regulated, whether it is user-to-user or search, which exemptions apply, and whether Ofcom categorisation adds duties.
UK Online Safety Act Service Scope and Categorization Guide
Move from UK Online Safety Act service scope to Category 1, 2A, or 2B threshold analysis without confusing categorisation with basic coverage.
UK Online Safety Act Transparency Reporting
Understand who must publish an Online Safety Act transparency report, what an Ofcom notice controls, and how to prepare traceable reporting data.
UK Online Safety Act vs DSA: scope and duties
Compare UK Online Safety Act and EU DSA scope, service classes, child-safety and platform duties, dates, evidence, exemptions, and enforcement.
When Are Senior Managers Liable Under the UK Online Safety Act?
When section 110 can make a named senior manager liable for an Online Safety Act information offence, the available defences, and the controls to keep.
When is age assurance required under the UK Online Safety Act?
When UK Online Safety Act services need highly effective age assurance, what Ofcom expects, and how UK data protection law applies.