SamhällsGUIDE

UK Online Safety Act and AI Chatbots

The UK Online Safety Act regulates defined services, not every chatbot simply because it generates text.

  • 3 min läsning
  • Senast uppdaterad
På denna sida3 min läsning
  1. Översikt
  2. Djupdykning
  3. Strategisk inverkan
  4. The Future of UK Online Safety Act and AI Chatbots
  5. Verklig implementering
  6. Risker & skyddsräcken
  7. Färdplan för genomförande
  8. Fortsätt utforska
  9. Vanliga frågor

Översikt

Ofcom says coverage depends on whether functionality meets statutory definitions such as user-to-user, search or pornography-publishing services, so product features and sharing flows matter.

Djupdykning

The Online Safety Act 2023 creates duties for providers of defined online services with a UK connection. Ofcom identifies three chatbot-relevant categories: user-to-user services that let people share content; search services enabling searches across more than one website or database; and services publishing pornographic content, which have age-assurance requirements. A chatbot can be covered by itself or as part of a larger platform. Ofcom describes a chatbot as potentially outside these categories when people interact only with the bot, it does not search multiple sites or databases, and it cannot generate pornography. This is a functional boundary, not a general exemption for products marketed as AI. In February 2026 Ofcom explained it could not investigate creation of illegal images by the standalone Grok chatbot under the Act’s current scope, while it separately examined X’s social platform and handling of content. Ofcom supports government consideration of possible changes, but discussion does not itself amend legislation. For covered services, obligations depend on service type and content. User-to-user and search providers have illegal-content risk-assessment and mitigation duties, along with applicable children’s safety requirements. AI material shared by users on a covered user-to-user service counts as user-generated content, whether created there or elsewhere. Pornography-publishing services must use highly effective age assurance. Ofcom enforces the Act; explanatory pages clarify statutory scope but do not expand it beyond the definitions Parliament enacted.

Strategisk inverkan

Risk och säkerhet

Katastrofala och vardagliga AI-skador beror båda på vem som förstår riskerna och vem som kan agera.

Tydligare beslut

Offentlig och professionell läskunnighet formar om en stark säkerhetspolitik är politiskt möjlig.

Skär igenom hypen

Tydliga förklaringar minskar fångst av hype, labb-PR och vag etikteater.

The Future of UK Online Safety Act and AI Chatbots

Ofcom continues to study chatbot risks and government has considered whether the framework should change. Research notices and discussion papers show regulator activity, while reforms remain proposals until legislation changes. Providers should assess their live features against the Act and monitor Ofcom codes, guidance and enforcement decisions. If Parliament changes scope, update the service map rather than assuming Ofcom’s current chatbot example remains unchanged. Keep evidence for moderation, age assurance and user-sharing paths. Monitor Ofcom statements and enacted amendments. Record launch dates.

Verklig implementering

A private one-to-one companion bot that does not search several sites or generate pornography may fall outside Ofcom’s described service categories.

A platform lets users publish custom bots and share conversations, which may make it a user-to-user service.

An AI answer engine searches multiple websites to respond and may meet the search-service definition.

Users post AI-generated abusive images on a covered social service; the posts are treated as user-generated content.

Risker & skyddsräcken

  • Behandling av existentiell risk som sci-fi medan förmåga sammansatta.

  • Förvirrande ytproduktsäkerhet med inriktning under hög autonomi.

  • Lämnar icke-engelska och icke-experta publik med endast lågkvalitativa källor.

Färdplan för genomförande

  1. Separata risker för produktskador, felaktig användning och förlust av kontroll/feljustering.

  2. Fråga vilka bevis som skulle ändra din syn på tidslinjer och svårighetsgrad.

  3. Föredrar primära källor och konkreta utvärderingar framför marknadsföringspåståenden.

  4. Identifiera en handlingsväg: karriär, policy, finansiering eller färdigheter – inte bara medvetenhet.

Fortsätt utforska

Free newsletter

Get the daily AI briefing

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the UK Online Safety Act and AI Chatbots quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

Starta frågesport

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

Vanliga frågor

What is UK Online Safety Act and AI Chatbots?

The UK Online Safety Act regulates defined services, not every chatbot simply because it generates text. Ofcom says coverage depends on whether functionality meets statutory definitions such as user-to-user, search or pornography-publishing services, so product features and sharing flows matter.

Which feature can bring a chatbot platform within the user-to-user category?

User-to-user status turns on enabling people to share content, not the model architecture.

Why might a private standalone chatbot be outside the Act under Ofcom’s example?

Ofcom describes a narrow outside-scope example using those three functional criteria.

An assistant searches multiple websites to answer. Which category may apply?

Multi-site or multi-database search may meet the search-service definition.

How is AI content shared by users on a covered user-to-user service treated?

Ofcom says it is regulated like comparable human-generated user content.

What did Ofcom say about investigating creation of illegal images by standalone Grok in February 2026?

Ofcom distinguished standalone creation from platform distribution and duties.