Tech Industry: What You Need to Know Right Now
By Saghir Hussain ·
Ofcom has confirmed the first enforcement notices under the Online Safety Act will land on doormats this week, targeting platforms that failed to submit illegal content risk assessments by the March deadline — a move that could finally force accountability onto services used by millions of British children daily.
Ofcom moves from guidance to enforcement
The regulator has named no companies publicly, but industry sources confirm TikTok, Snap, and several adult sites are among those expected to receive formal information requests. Fines of up to £18 million or ten per cent of global turnover — whichever is higher — are now live powers, not theoretical threats.
For small UK publishers and community forums, the compliance burden remains disproportionate. The News Media Association has warned that regional titles — already operating on margins thinner than a folded broadsheet — face legal exposure for user comments they lack the resource to moderate around the clock. Ofcom says proportionate guidance for "low-risk" services is coming; critics say it should have arrived before the Act took effect.
Technology Secretary Peter Kyle told the Commons last week that "the era of self-regulation is over," but stopped short of confirming whether the government will back Ofcom's push to treat end-to-end encryption as no barrier to scanning for child abuse material — a position that puts ministers at odds with WhatsApp and Signal, both of which have threatened to withdraw from the UK rather than comply.
UK AI Safety Institute publishes first evaluations
Separately, the UK AI Safety Institute released its inaugural batch of model evaluations on Friday, covering four frontier systems from OpenAI, Anthropic, Google DeepMind, and Meta. The tests focused on cybersecurity, biological risk, and autonomous replication capabilities — areas the institute argues pose the clearest near-term threats.
Results were mixed. No model passed every benchmark. Several demonstrated "concerning" proficiency in generating actionable vulnerability exploits, though researchers stressed this does not equate to autonomous hacking capability. The institute has not named which models failed which tests, citing responsible disclosure protocols.
Industry reaction was guarded. TechUK welcomed the transparency but cautioned that publishing partial results without full methodology risks creating a "league table" that rewards gaming over genuine safety. Civil society groups, including the Ada Lovelace Institute, argued the evaluations are too narrow — omitting labour displacement, environmental impact, and bias in high-stakes decisions like benefit assessments or housing allocation.
The government maintains the institute is a "global first" and a template for international coordination. The EU AI Office and US AI Safety Institute are both observing the UK approach closely.
CMA digital markets regime enters force
From today, the Competition and Markets Authority holds new powers to designate firms with "strategic market status" in digital activities — a label that triggers bespoke conduct requirements and pro-competition interventions. Google, Apple, and Amazon are widely expected to be the first targets.
For the UK's 5.5 million small businesses, the practical stakes are immediate: app store fees, self-preferencing in search, and data access terms all fall under the new regime. The Federation of Small Businesses estimates that "digital gatekeeper taxes" cost UK SMEs over £2 billion annually in inflated advertising and commission costs.
The CMA has pledged speed — interim enforcement orders within months, not years. But legal challenges are inevitable. Apple has already signalled it will contest any designation judicially, a strategy that could delay remedies until the next parliament.
---
The common thread across all three stories is simple: decisions made in San Francisco, Seattle, and Cupertino now land on British high streets, in British classrooms, and on British invoices within weeks. The UK has the regulatory architecture. Whether it has the political stamina to enforce it — against the world's best-funded legal teams — is the question that will define this parliament.