Artifact GuideUKTransparency Reporting

UK Online Safety Act Transparency Reporting

Transparency reporting is an annual Ofcom-notice duty for Category 1, 2A, and 2B providers, not a universal report required from every regulated service.

This guide explains the notice process, permitted subject matter, 2026 implementation position, publication, corrections, and supporting data controls.

Author
Sorena AI
Published
May 9, 2026
Updated
Oct 15, 2026
Overview

A provider must prepare a when Ofcom gives it a section 77 notice as the provider of a relevant categorised service. The notice sets the information, reporting period, form, manner, and deadline. Schedule 8 limits the matters Ofcom may request. Keep this process separate from other Ofcom information notices.

Search this module

Find a question or answer quickly

4 of 4 questions
Question 1

Who must report and when?

Section 77 requires Ofcom, once a year, to give every provider of a a . A relevant service is a Category 1, Category 2A, or Category 2B service. The provider must produce and publish the report by the date and in the manner specified in the notice.

Ofcom published final transparency guidance in July 2025 and its categorised-services register on 30 June 2026, most recently updated on 28 September 2026. Ofcom's implementation roadmap says categorised services will publish their first transparency reports in 2027 and that a further timeline update will follow the register. Providers should use the actual notice as the controlling deadline rather than infer a date from an older roadmap.

  • Confirm that the named service and provider match the current Ofcom register and the notice.
  • Extract every request, definition, reporting period, unit, disaggregation, format, publication method, and deadline into a controlled requirements table.
  • Escalate ambiguity during Ofcom's draft-notice process and preserve correspondence and the final position.
Question 2

What can the notice require?

Schedule 8 lists possible subjects. They include the incidence and dissemination of illegal content and content harmful to children; systems for risk assessment, reporting, complaints, moderation, user support, age assurance, and compliance; the use and effect of algorithms; cooperation with public authorities; staff and resourcing; and other listed safety and governance matters.

The notice determines which permitted matters apply to the service. Do not assume that every Schedule 8 item will be required, or substitute a voluntary environmental, social, and governance report. Where a requested figure cannot be measured directly, document the method, limitations, estimation, and quality checks rather than presenting an unsupported number as exact.

  • Assign each requested item to a data owner and an accountable approver.
  • Define the numerator, denominator, event, service part, geography, age group, content taxonomy, and treatment of duplicates before querying data.
  • Retain reproducible queries, source-system versions, exclusions, manual adjustments, samples, reconciliations, and explanations of uncertainty.
Question 3

How should publication and corrections be controlled?

Treat the public report as a regulated output. Review it for consistency with risk assessments, terms, complaints data, published policies, prior submissions, and the actual service. Preserve approvals, the publication URL and time, the exact published file, accessibility checks, and evidence that it remained available as required.

If an error is found, assess materiality, notify the responsible legal and reporting owners, preserve the original, and follow the notice and Ofcom guidance for correction or communication. Do not overwrite the record without a dated explanation. A transparency report does not replace records that Ofcom may request under other powers.

  • Run privacy, security, legal, and statistical-disclosure review without suppressing information the notice requires.
  • Use stable metric definitions across reporting cycles and explain genuine methodology changes.
  • Keep an issue log for late source data, weak controls, disagreements, corrections, and remediation.
Question 4

Questions and answers

Does every regulated service publish an annual transparency report?

No. The statutory section 77 duty applies when Ofcom gives a notice to the provider of a Category 1, Category 2A, or Category 2B service. Other regulated services may face separate record-keeping or information-request duties, but those are not the annual transparency-report regime.

Are the first statutory reports already due?

Ofcom's current roadmap says categorised services will publish their first reports in 2027 and that it will update the timeline after publishing the register. The provider should follow its final Ofcom notice for the exact deadline and manner of publication.

Can a provider substitute an existing corporate transparency report?

Only if the existing report, as published, satisfies every requirement in the final Ofcom notice. A voluntary trust-and-safety, environmental, social, governance, or sustainability report does not displace section 77. The provider should map each notice item to a defined metric, reproducible source, quality check, approval, and published location, and explain estimation or limitations where the requested measure cannot be observed directly.

Primary sources

References and citations

legislation.gov.uk3 citations
Referenced sections
  • Binding transparency-notice and publication duty.
  • Creates the annual notice, report, publication, and timing framework for relevant categorised services.
  • Requires production and publication in accordance with Ofcom's notice.
ofcom.org.uk2 citations
Referenced sections
  • Current implementation timing.
  • Current implementation roadmap stating that first categorised-service transparency reports are due in 2027 and that timing will be updated.
legislation.gov.uk2 citations
Referenced sections
  • Binding list of permitted notice matters.
  • Lists the matters that may be included in transparency notices.
Show all related guides (41)

Online Safety Act moderation, reporting, and complaints

How UK Online Safety Act duties shape content moderation, user reporting, complaints, reinstatement, terms, records, and human oversight.

UK Online Safety Act categories: thresholds and duties

How Category 1, 2A, and 2B thresholds work, how Ofcom categorises services, and what the register updated in September 2026 means.

When Are Senior Managers Liable Under the UK Online Safety Act?

When section 110 can make a named senior manager liable for an Online Safety Act information offence, the available defences, and the controls to keep.

When is age assurance required under the UK Online Safety Act?

When UK Online Safety Act services need highly effective age assurance, what Ofcom expects, and how UK data protection law applies.

Online Safety Act Children's Access Assessment

Decide whether children are likely to access a regulated service or part of it, document the evidence, and identify when a children's risk assessment follows.

Online Safety Act Complaints Handling Workflow

Route and decide Online Safety Act complaints, record the required response, and distinguish an internal review from an Ofcom complaint or super-complaint.

Online Safety Act Illegal Content Risk Assessment

Assess illegal-content risks by offence kind, likelihood, severity, affected users, service design, controls, evidence, and review triggers.

Online Safety Act: User-to-user and Search Service Scope

Decide whether an online service is a regulated user-to-user service, search service, combined service, or exempt service under the UK Online Safety Act.

UK Online Safety Act Age Assurance Options

Compare age verification and age estimation methods by assurance, privacy, accessibility, bias, evasion risk, and operational evidence.

UK Online Safety Act Age Assurance Requirements

When Online Safety Act services need age assurance, what highly effective age assurance means, and how safety duties interact with data protection.

UK Online Safety Act Age Assurance Selection Workflow

Choose an age-assurance method for an Online Safety Act duty by testing effectiveness, privacy, accessibility, evasion risk, and the consequence of error.

UK Online Safety Act Applicability Test Guide

Test whether a service is covered by the UK Online Safety Act by checking service functionality, UK links, exemptions, and the duties that follow.

UK Online Safety Act Categorisation Guide

Apply the UK Online Safety Act Category 1, 2A, and 2B thresholds, calculate active UK users, and use Ofcom's register first published in June 2026 and most recently updated in September.

UK Online Safety Act Checklist

Verify UK Online Safety Act scope, assessments, controls, reporting, complaints, records, child safety, and category-specific work.

UK Online Safety Act Children's Safety Duties Guide

Apply the UK Online Safety Act children's access, risk-assessment, safety, age-assurance, reporting, complaints, and record-keeping duties.

UK Online Safety Act Compliance Guide

Build a UK Online Safety Act compliance program from service scope through assessments, controls, evidence, review, and Ofcom response.

UK Online Safety Act Content Moderation and Appeals Guide

Design UK Online Safety Act moderation, content-reporting, complaints, and review processes for illegal content and content harmful to children.

UK Online Safety Act Deadlines and Compliance Calendar Guide

UK Online Safety Act compliance dates for risk assessments, child safety, categorised services, fees, and event-based deadlines.

UK Online Safety Act Enforcement and Penalties Guide

How Ofcom investigates Online Safety Act breaches, issues decisions, requires remedies, imposes penalties, and seeks court orders.

UK Online Safety Act FAQ: scope, duties, and deadlines

Standalone answers and decision paths for UK Online Safety Act scope, risk assessments, child protection, age assurance, categories, reporting, and enforcement.

UK Online Safety Act ICO Overlap Guide

Apply the Online Safety Act and UK data protection law together for age assurance, moderation, profiling, recommender systems, and safety-data sharing.

UK Online Safety Act Illegal Content Duties Explained

Understand the illegal-content risk assessment, safety, reporting, complaints, record-keeping, and review duties for regulated user-to-user and search services.

UK Online Safety Act Moderation, Complaints and Appeals

Build moderation, content-reporting, and complaints procedures for regulated services, and understand where the Online Safety Act does and does not require an appeal.

UK Online Safety Act Ofcom Enforcement Guide

How Ofcom assesses Online Safety Act concerns, gathers information, investigates suspected breaches, and reaches enforcement decisions.

UK Online Safety Act Penalties and Fines Guide

The Online Safety Act penalty ceiling, qualifying worldwide revenue, daily penalties, penalty factors, and payment consequences.

UK Online Safety Act Regulated Service Scope Guide

Understand which user-to-user, search, combined, and provider-pornography services the UK Online Safety Act regulates and which exemptions narrow scope.

UK Online Safety Act Requirements Guide

See which UK Online Safety Act requirements apply to Part 3 services, child-accessible services, provider pornography, and categorised services.

UK Online Safety Act Risk Assessment Template

A field-by-field template for recording service facts, statutory risks, evidence, controls, residual risk, approval, and reassessment triggers.

UK Online Safety Act Risk Assessment Workflow

Run illegal-content and children's risk assessments in the right order, with evidence for risks, controls, governance, and reassessment triggers.

UK Online Safety Act Risk Assessments Playbook

Organise recurring Online Safety Act risk assessments across product, safety, data, engineering, legal, and governance teams.

UK Online Safety Act Senior Manager Liability Explained

Understand when a named senior manager or corporate officer can face personal liability for Online Safety Act information offences and how to control the risk.

UK Online Safety Act Service Classification Workflow

Decide whether a service is regulated, whether it is user-to-user or search, which exemptions apply, and whether Ofcom categorisation adds duties.

UK Online Safety Act Service Scope and Categorization Guide

Move from UK Online Safety Act service scope to Category 1, 2A, or 2B threshold analysis without confusing categorisation with basic coverage.

UK Online Safety Act Transparency Reporting

Understand who must publish an Online Safety Act transparency report, what an Ofcom notice controls, and how to prepare traceable reporting data.

UK Online Safety Act vs DSA: scope and duties

Compare UK Online Safety Act and EU DSA scope, service classes, child-safety and platform duties, dates, evidence, exemptions, and enforcement.