Britain sets first codes of practice for tech firms in internet security regime

LONDON: Britain’s online safety regime came into force on Monday, requiring social media companies such as Meta’s Facebook and ByteDance’s TikTok to take action to tackle criminal activity on their platforms and make them more secure than their design.

Media regulator Ofcom said it had published its first codes of practice to tackle unlawful harm such as child sexual abuse and aiding or abetting suicide.

Websites and apps have until March 16, 2025 to assess the risks posed by illegal content for children and adults on their platforms, Ofcom said.

After the deadline, they will have to start implementing measures to mitigate these risks, such as better moderation, easier reporting and built-in safety testing, Ofcom said.

Ofcom chief executive Melanie Dawes said the security spotlight was now firmly on tech companies.

“We will be closely monitoring the industry to ensure companies meet the strict safety standards set for them under our first codes and directives, with further requirements quickly following in the first half of next year,” he said.

The Internet Safety Act, which became law last year, sets stricter standards for platforms like Facebook, YouTube and TikTok, with a focus on protecting children and removing illegal content.

Under the new code, reporting and complaints functions should be easier to find and use.

High-risk providers should use automated tools called hash matching and URL crawling to detect child sexual abuse material, Ofcom said.

The regulator will be able to impose fines of up to 18 million pounds ($22.3 million), or 10% of a company’s annual global turnover, if it fails to comply.

Britain’s technology secretary Peter Kyle said the new codes were a “significant change in internet security”.

“If the platforms fail to step up, the regulator has my support to use its full powers, including issuing fines and asking the courts to block access to websites,” he said.