The Online Safety Act and Schools
How the Online Safety Act 2023 affects schools — both as operators of networks and as institutions supporting pupils who use regulated services.
Schools sit in a dual position under the Online Safety Act: they are users of regulated services (when pupils access social media, gaming, and other platforms) and they are also operators of their own networks and devices, which brings its own responsibilities. The Act does not directly regulate school networks, but KCSIE (Keeping Children Safe in Education) and Ofcom's online safety framework are closely aligned. This guide clarifies what schools need to know and do.
Are school networks regulated by the Act?
The Online Safety Act applies to 'user-to-user services' and 'search services' that host user-generated content or enable user interaction. Most school networks and learning management systems do not fall under the Act's direct regulatory scope. However, schools have their own duties under KCSIE and the Prevent duty to maintain appropriate filtering and monitoring on school-owned networks and devices. Ofcom's guidance and KCSIE are increasingly aligned in their expectations.
Key takeaway: School networks are not directly regulated by the Act, but KCSIE filtering and monitoring duties remain in full force.
KCSIE and the Online Safety Act: where they align
KCSIE requires schools to have appropriate filtering and monitoring in place and to ensure that those systems are regularly reviewed. The Online Safety Act similarly requires regulated platforms to take a proactive, risk-assessed approach to online safety. Both frameworks emphasise: risk assessment, appropriate technical controls, incident response procedures, and training for staff. Schools that have a robust KCSIE-compliant online safety policy are well-positioned as the regulatory landscape evolves.
Key takeaway: A strong KCSIE-compliant approach covers most of what schools need — the Act reinforces rather than replaces existing school duties.
How the Act affects pupils' use of social media
The Act requires platforms likely to be accessed by children to apply age-appropriate design and safety measures. This means platforms your pupils use — TikTok, Instagram, Snapchat, gaming platforms — are under increasing legal pressure to make their services safer. Schools can use this as context in digital literacy education: pupils can be taught that platforms have legal obligations, what those obligations mean, and how to use complaint mechanisms when platforms fail them.
Key takeaway: The Act's platform duties give schools relevant context for digital citizenship and online safety education.
Reporting to Ofcom as a school
Schools and school staff can submit intelligence to Ofcom if they believe a platform is consistently failing to meet its legal duties — for example, if a platform repeatedly fails to act on reports of bullying or harmful content targeting pupils. Ofcom does not investigate individual cases, but uses intelligence from schools, parents, and professionals to inform its regulatory work. Maintaining records of platform complaints and responses helps build a documented picture.
Key takeaway: Schools can contribute to Ofcom's regulatory intelligence by documenting and reporting systemic platform failures.
Curriculum and staff training implications
The Act's passage has refreshed the context for online safety education. Schools should ensure their curriculum covers: what the Act requires of platforms, how pupils can use reporting tools effectively, the distinction between illegal content (which must be removed) and harmful content (which may depend on the service type), and emerging risks such as AI-generated content and age-restricted material online. Staff training should be updated to reflect the current legal framework.
Key takeaway: Update online safety curriculum content to include what the Act means for pupils and how reporting mechanisms work.
What the Act does
Requires platforms accessible to children to carry out and publish children's risk assessments.
Obliges platforms to apply age-appropriate defaults including stronger privacy settings for under-18s.
Creates enforceable duties for platforms to act on illegal content, including CSAM and grooming.
Provides a framework that schools can reference in PSHE and digital literacy teaching.
What the Act does not do
Understanding the limits of the Act helps you set realistic expectations when using complaint and reporting processes.
Directly regulate school networks, intranets, or learning management systems.
Replace KCSIE, the Prevent duty, or schools' own safeguarding responsibilities.
Give schools direct enforcement powers over social media platforms on behalf of pupils.
Practical steps
Review your school's filtering and monitoring provision against the UK Safer Internet Centre's appropriate filtering standards.
Update your online safety policy to reference the Online Safety Act 2023 and Ofcom's codes of practice.
Include the Act's platform duties in your PSHE or computing curriculum — pupils should understand their rights online.
Document any platform complaint you make on behalf of a pupil, including the platform's response and timescale.
Attend or access CPD from organisations such as NSPCC Learning or the UK Safer Internet Centre on the Act's implications for schools.
Frequently asked questions
Does the Online Safety Act mean schools can now force platforms to remove content about pupils?
No. The Act strengthens duties on platforms, but schools do not have a direct enforcement route under it. The most effective approach remains using the platform's own reporting tools, escalating through the police or Ofcom where appropriate, and documenting every step. The Act's teeth are enforced by Ofcom, not by schools or parents directly.
Does the Act affect how schools teach online safety?
Yes, in the sense that the context has changed. Pupils can now be taught that platforms have legal obligations, not just voluntary policies. PSHE and digital literacy sessions should reflect the current framework — including the distinction between illegal content (must be removed) and harmful content (which depends on the service type and the age of the user).
Sources and further reading
Related guides
Last reviewed: 19 April 2026
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Was this page helpful?