InsightNimaOSA
The UK’s new CSEA reporting duty: What T&S teams need to do now
From 7 April 2026, user-to-user services (U2U) in scope of the UK Online Safety Act (OSA) must report detected Child Sexual Exploitation and Abuse (CSEA) content to the UK’s National Crime Agency (NCA). If you already report to the US-based National Center for Missing & Exploited Children (NCMEC), you likely don’t need to overhaul your infrastructure, but there are possible gaps worth auditing. Here's what the duty requires and where it gets complicated. Failure to comply may lead to fines of up to 10% of qualifying worldwide revenue or £18 million (whichever is greater).





