Start with what you do online

If you use social media, search or forums

You may encounter stronger reporting tools, changed recommendations, warnings, age gates or new choices on large services. The Act does not create one universal login or identity requirement for the internet. ^source

What to look for

• A clear reason when content or an account is restricted.
• A usable complaint and appeal route.
• A privacy notice that explains what an age check collects and retains.
• Alternatives if a method is inaccessible or produces the wrong result.

If you’re a parent or carer

The protection-of-children regime is intended to reduce children's exposure to pornography and other defined harmful content. Ofcom says the relevant duties came into force in 2025 and its 2026 report found uneven implementation across sectors. ^{source source}

Age assurance can help, but it does not replace conversations, device settings, service design, education or support when harm occurs.

If you depend on private or sensitive spaces

Survivors, journalists, young LGBTQ+ people, whistleblowers and people seeking health information can depend on confidentiality and contextual moderation. This is not a claim that every one of these users has already been harmed by the Act; it is a reason to test implementation carefully.

Ask whether a service explains automated decisions, protects sensitive data, offers human review and publishes enough information to assess disparate effects.

If you run a site, app or online community

Start with functions, users and UK links—not company size or familiar labels. If in scope, identify which risk assessments and duties apply, select proportionate measures, keep required records and review them. ^source

Small size does not automatically remove core duties. Equally, being in scope does not mean a microservice must copy the systems of a global platform. Obtain professional advice where the scope or risk is uncertain.

Questions anyone can ask

1. What is the legal or policy purpose? A service should be able to explain the outcome it is pursuing.
2. What data or speech is affected? Look beyond labels to actual inputs, outputs and retention.
3. What alternative was considered? Proportionality includes whether a less intrusive route could work.
4. What happens when the system is wrong? Accessible notice and redress are part of a trustworthy system.