27 Accepted

Pass legislation requiring generative AI platforms to conduct risk assessments and implement user safeguards.

Recommendation
To protect citizens from the AI-exacerbated spread of misinformation and harm, the government should pass legislation that covers generative AI platforms, bringing them in line with other online services that pose a high risk of producing or spreading illegal or harmful content. Following the Principles identified by this report, this legislation should require generative AI platforms to: provide risk assessments to Ofcom on the risks associated with different prompts and outputs, including how far they can create or spread illegal, harmful or misleading content; explain to Ofcom how the model curates content, responds to sensitive topics and what guardrails are in place to prevent content that is illegal or harmful to children; implement user safeguards such as feedback, complaints and output flagging; and prevent children from accessing inappropriate or harmful outputs. (Recommendation, Paragraph 76)
Government Response Summary
The government believes the Online Safety Act takes a proportionate approach by focusing on illegal or harmful content to children, requiring services to undertake risk assessments, and holding Category 1 services to account over the enforcement of their terms of service.
Government Response
Accepted
HM Government Accepted
The government is committed to a safer online world and we urge providers to counter the spread of mis- and disinformation on their services. The government recognises that online misinformation has the potential to cause real-world impacts and undermine public trust in the information environment. However, tackling this issue is extremely complicated. We need to be honest that you cannot eliminate all harmful content online and a balance must be found with freedom of expression – a critical fundamental right. We recognise that mis- and disinformation is a broad, and cross-cutting issue, and we therefore think the most appropriate response is to directly address the most prevalent and concerning harms associated with it. The OSA takes a proportionate approach by focusing on the worst kinds of mis- and disinformation – that which is illegal or harmful to children. This means companies are required to tackle illegal disinformation content on their services and protect children from certain harmful mis- and disinformation. The OSA will also hold Category 1 services to account over the enforcement of their terms of service, including terms related to mis- and disinformation. The OSA requires services to undertake risk assessments for illegal content, which includes illegal mis- and disinformation. These risk assessments include assessing the risks posed by algorithms. Services then need to take effective steps to mitigate identified risks. For example, Ofcom’s codes of
Addressee Bodies
Department for Science, Innovation and Technology
Timeline
Recommendation age 0.9 yr
Report published 11 Jul 2025