Code of Practice for Online Safety, Social Media Services
In forceThe Code applies to Social Media Services designated or to be designated under section 45K(1) of the Broadcasting Act 1994; six services (Facebook, HardwareZone, Instagram, TikTok, X and YouTube) were designated when it took effect.
It requires a designated service to minimise all end-users' exposure to harmful content (sexual content, violent content, suicide and self-harm content, cyberbullying content, content endangering public health, and content facilitating vice and organised crime) through published community guidelines and content moderation. Beyond that baseline, the Code requires additional measures for children, defined as anyone below 18.
Unless the service restricts child access entirely, a child's account must have age-appropriate default settings that are more restrictive than a general account, tools for the child or a parent or guardian to manage exposure and limit the visibility of and interaction with the account, and a clear warning before the child or parent opts out of those protective defaults.
A designated service must also use technology to proactively detect and swiftly remove child sexual exploitation and abuse material.
Source: Full text of law