Online Safety Act: Categorisation Register Pushed Back to July 2026 in New Timeline

Last week Ofcom published a new timeline for implementation of the Online Safety Act, including a significant delay to its categorised services register. 

 

Shape The UK’s Online Safety Act, first passed in 2023, has been going through a long implementation process and is now beginning to reach its final stages. Last week, Ofcom confirmed a major update to its roadmap: the categorisation register, which determines which services face the most extensive duties under the Act, will now be published in July 2026, a year later than originally planned. 

Why Categorisation Matters 

The register will identify services in Category 1, 2A, and 2B, based on thresholds set by Ofcom. These categories trigger additional obligations beyond the baseline duties on illegal content and child safety. Dependent on the category given, additional duties include: 

  • Transparency reporting 
  • Enhanced requirements on risk assessments and record keeping 
  • Additional terms of service duties 
  • Protections for news publisher and journalist content 
  • Providing user empowerment features 
  • Providing user identity verification options 
  • Prevention of fraudulent advertising 
  • Disclosure of information about use of the service by a deceased child user 

The Delay 

According to Ofcom, the delay partially stems from a legal challenge brought by the Wikimedia Foundation against the Government’s categorisation regulations, which concluded in August 2025. Ofcom says the judgment prompted further consideration of how categorisation should be applied. As a result, the regulator will run a representations process in early 2026, giving services that meet threshold conditions an opportunity to comment on provisional decisions before the register is finalised. Ofcom argues this step is essential to ensure accuracy and fairness. 

For businesses likely to fall within a category, this delay presents a mixed picture. On one hand, it provides extra time to prepare for complex compliance requirements. On the other, it extends a period of uncertainty, making it harder to plan for obligations such as transparency reporting and ID verification. techUK notes that this uncertainty could complicate strategic planning for organisations already facing significant operational and regulatory challenges. 

Government Response 

In a letter to Ofcom dated 12 November 2025, the Secretary of State for Science, Innovation and Technology, Rt Hon Liz Kendall MP, acknowledged Ofcom’s updated roadmap but expressed concern about delays to the implementation of additional duties for categorised services. While recognising the need for a robust regime, the Secretary emphasised the importance of maintaining momentum and urged Ofcom to explore ways to expedite processes, particularly around user empowerment duties. 

The letter also highlighted the Government’s expectation that services should not wait for formal deadlines to implement protections for users, including measures to tackle harmful content and antisemitism online. The Secretary confirmed that Ofcom will have the Government’s full backing to use its powers under the Act and noted plans for further monitoring and reporting, including an assessment of industry compliance with illegal content and child safety duties in December. 

On fees, the Secretary welcomed Ofcom’s approach to proportionality and signalled a willingness to review the regime to ensure it does not impose undue burdens on responsible businesses. Further engagement on revenue thresholds and exemptions is expected in early 2026. 

Ofcom’s New Timeline 

You can see the full timeline from Ofcom here, or see below a more concise view of what’s coming: 

  • Nov 2025 – Final guidance on improving online safety for women and girls. 
  • Dec 2025 – Consultation on disclosure of information about deceased child users, and an update to information powers guidance 
  • End of 2025 - The industry fees regime expected to commence. 
  • Early 2026 – Representations process for categorisation decisions. 
  • Feb 2026 – Final guidance on super-complaints. 
  • Apr 2026 – Final guidance on technology notices for detecting CSEA and terrorism content. 
  • Spring 2026 – Media literacy recommendations published. 
  • Summer 2026 – 
    • Categorisation register published and consultation on additional duties for categorised services. 
    • Transparency regime: Ofcom will issue notices to categorised services requiring transparency reports; first reports due summer 2027. 
    • Age assurance statutory report: Assessment of how services have implemented age assurance measures. 
  • Autumn 2026 – Statement on additional safety measures to improve codes. 
  • Oct 2026 – Statutory report on content harmful to children. 
  • Nov 2026 – Online Information Advisory Committee’s first report. 
  • Jan 2027 – Statutory report on app stores. 
  • Mid-2027 – Final policy statements on categorised duties (some earlier where possible). 

techUK will continue to monitor developments in the Online Safety space. The implications of decisions made in this implementation stage of the Online Safety Act, it is key for the Ofcom to get it right and continue to work with the tech sector to ensure the best possible digital future for the UK. 


Do get in contact with the team if you have any questions: 

Samiah Anderson

Samiah Anderson

Head of Digital Regulation, techUK

Audre Verseckaite

Audre Verseckaite

Senior Policy Manager, Data & AI, techUK

Oliver Alderson

Oliver Alderson

Junior Policy Manager, techUK

Daniella Bennett Remington

Daniella Bennett Remington

Policy Manager - Digital Regulation, techUK

techUK's Policy and Public Affairs Programme activities

techUK helps our members understand, engage and influence the development of digital and tech policy in the UK and beyond. We support our members to understand some of the most complex and thorny policy questions that confront our sector. Visit the programme page here.

Upcoming events

Latest news and insights 

Learn more and get involved

 

Policy Pulse Newsletter

Sign-up to get the latest tech policy news and how you can get involved in techUK's policy work.

 

 

Here are the five reasons to join the Policy and Public Affairs programme

Download

Join techUK groups

techUK members can get involved in our work by joining our groups, and stay up to date with the latest meetings and opportunities in the programme.

Learn more

Become a techUK member

Our members develop strong networks, build meaningful partnerships and grow their businesses as we all work together to create a thriving environment where industry, government and stakeholders come together to realise the positive outcomes tech can deliver.

Learn more

Meet the team 

Antony Walker

Antony Walker

Deputy CEO, techUK

Alice Campbell

Alice Campbell

Head of Public Affairs, techUK

Edward Emerson

Edward Emerson

Head of Digital Economy, techUK

Nimmi Patel

Nimmi Patel

Associate Director for Policy, techUK

Samiah Anderson

Samiah Anderson

Head of Digital Regulation, techUK

Audre Verseckaite

Audre Verseckaite

Senior Policy Manager, Data & AI, techUK

Mia Haffety

Mia Haffety

Policy Manager - Digital Economy, techUK

Archie Breare

Archie Breare

Policy Manager - Skills & Digital Economy, techUK

Daniella Bennett Remington

Daniella Bennett Remington

Policy Manager - Digital Regulation, techUK

Oliver Alderson

Oliver Alderson

Junior Policy Manager, techUK

Tess Newton

Team Assistant, Policy and Public Affairs, techUK

 

 

Related topics