The UK communications regulator, Ofcom, has commenced active enforcement under the Online Safety Act 2023 specifically directed at generative artificial intelligence chatbots and synthetic media tools. The statutory framework explicitly places large language models and conversational AI platforms under direct regulatory supervision, requiring technology companies to protect British users—particularly children and women—from automated exploitation, harmful chatbot interactions, and non-consensual deepfakes.
Mandatory safety assessments for conversational AI platforms
Under the new regulatory guidance issued in September 2026, tech providers deploying AI chatbot services in the UK face strict compliance mandates:
- Child safety risk assessments: AI services capable of interacting with underage users must implement robust age verification and prevent exposure to self-harm encouragement, grooming, or toxic conversational outputs.
- Zero tolerance for intimate deepfakes: Platforms that facilitate or host AI-generated intimate images face immediate criminal referrals and regulatory takedown orders, with developers required to block automated “nudification” prompt capabilities.
- Continuous algorithmic monitoring: Chatbot providers must document safety filters, refusal mechanisms, and user reporting procedures in comprehensive compliance logs submitted to Ofcom upon request.
Severe financial sanctions and corporate officer liability
The Online Safety Act arms Ofcom with unprecedented enforcement mechanisms to ensure technology platforms comply with UK standards:
- Fines up to £18 million or 10% of revenue: Non-compliant AI developers risk maximum financial penalties of up to £18 million or 10% of their qualifying worldwide turnover, whichever is greater.
- Service restriction orders: In cases of severe or repeated breaches, Ofcom holds statutory powers to secure court orders requiring payment processors and internet service providers to block access to the non-compliant AI platform in the UK.
- Corporate officer liability: Senior managers who fail to comply with statutory information notices or obstruct safety audits face individual criminal liability.