Agent WranglersTNS-24Required UK law
Assess the risk of illegal content for UK users
If your service lets users share content and has links to the UK, keep a written assessment of the risk of illegal content. Redo it before any major change. If children are likely to use the service, keep a children's risk assessment too.
Region
United Kingdom (UK). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
How to do it
The Online Safety Act 2023 covers services with many UK users or with the UK as a target market. Ofcom set 16 March 2025 as the deadline for the first illegal content risk assessment. The duties to act on it have applied since 17 March 2025. Children's risk assessments were due by 24 July 2025 for services likely to be used by children. Follow Ofcom's risk assessment guidance, which works through each kind of illegal harm and the features that raise it. Link each risk to the measure that answers it, such as the report button and appeals. Keep the record in the obligations register with an owner.
How to check
The register holds an illegal content risk assessment dated within the last 12 months, with an owner. The release checklist asks whether a change adds a feature, such as messages between strangers, and links a new assessment when it does.
Sources
Related rules
- TNS-1 Put a report button on every piece of user content in Trust and safety
- TNS-10 Have a second person decide each appeal in Trust and safety
- CMP-1 Keep a register of every duty that applies in Compliance and governance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/trust-and-safety/running-trust-and-safety/uk-risk-assessment">Agent Wranglers trust and safety playbook</a>. In code you write, add a comment next to it with the same link.