Online Safety Act 2023UK · 2023 c. 50
Digiphile
Online Safety Act 2023 (c. 50) – Section 100 – Power to require information

Sections

Section 100Power to require information

(1) OFCOM may by notice under this subsection require a person within subsection (5) to provide them with any information that they require for the purpose of exercising, or deciding whether to exercise, any of their online safety functions.
(2) The power conferred by subsection (1) includes power to require a person within subsection (5) to—
  • (a)
    obtain or generate information;
  • (b)
    provide information about the use of a service by a named individual.
(3) The power conferred by subsection (1) also includes power to require a person within any of paragraphs (a) to (d) of subsection (5) to take steps so that a person authorised by OFCOM is able to view remotely—
  • (a)
    information demonstrating in real time the operation of systems, processes or features, including functionalities and algorithms, used by a service;
  • (b)
    information generated by a service in real time by the performance of a test or demonstration of a kind required by a notice under subsection (1).
(4) But the power conferred by subsection (1) must be exercised in a way that is proportionate to the use to which the information is to be put in the exercise of OFCOM’s functions.
(5) The persons within this subsection are—
  • (a)
    a provider of a user-to-user service or a search service,
  • (b)
    a provider of an internet service on which regulated provider pornographic content is published or displayed,
  • (c)
    a person who provides an ancillary service (within the meaning of section 144) in relation to a regulated service (see subsections (11) and (12) of that section),
  • (d)
    a person who provides an access facility (within the meaning of section 146) in relation to a regulated service (see subsections (10) and (11) of that section),
  • (e)
    a person who was within any of paragraphs (a) to (d) at a time to which the required information relates, and
  • (f)
    a person not within any of paragraphs (a) to (e) who appears to OFCOM to have, or to be able to generate or obtain, information required by them as mentioned in subsection (1).
(6) The information that may be required by OFCOM under subsection (1) includes, in particular, information that they require for any one or more of the following purposes—
  • (a)
    the purpose of assessing compliance with—
    • (i)
      any duty or requirement set out in Chapter 2, 3, 4 or 5 of Part 3,
    • (ii)
      any duty set out in section 64 (user identity verification),
    • (iii)
      any requirement under section 66 (reporting CSEA content),
    • (iv)
      any duty set out in section 71 or 72 (terms of service),
    • (v)
      any duty set out in section 75 (deceased child users),
    • (vi)
      any requirement relating to transparency reporting (see section 77(3) and (4)), or
    • (vii)
      any duty set out in section 81 (provider pornographic content);
  • (b)
    the purpose of assessing compliance with a requirement under section 83 (duty to notify OFCOM in relation to the charging of fees);
  • (c)
    the purpose of a consultation about a threshold figure as mentioned in section 86 (threshold figure for the purposes of charging fees);
  • (d)
    the purpose of ascertaining the amount of a person’s qualifying worldwide revenue for the purposes of—
  • (e)
    the purpose of assessing compliance with any requirements imposed on a person by—
    • (i)
      a notice under section 121(1) (notices to deal with terrorism content and CSEA content), or
    • (ii)
      a confirmation decision;
  • (f)
    the purpose of assessing the accuracy and effectiveness of technology required to be used by—
  • (g)
    the purpose of assessing whether to give a notice under section 121(1) relating to the development or sourcing of technology (see subsections (2)(b) and (3)(b) of that section);
  • (h)
    the purpose of dealing with complaints made to OFCOM under section 169 (super-complaints);
  • (i)
    the purpose of OFCOM’s advice to the Secretary of State about provision to be made by regulations under paragraph 1 of Schedule 11 (threshold conditions for categories of Part 3 services);
  • (j)
    the purpose of determining whether a Part 3 service meets threshold conditions specified in regulations under paragraph 1 of Schedule 11;
  • (k)
    the purpose of preparing a code of practice under section 41;
  • (l)
    the purpose of preparing guidance in relation to online safety matters;
  • (m)
    the purpose of carrying out research, or preparing a report, in relation to online safety matters;
  • (n)
    the purpose of complying with OFCOM’s duties under section 11 of the Communications Act, so far as relating to regulated services (media literacy).
(7) F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(8) The reference in subsection (3) to a person authorised by OFCOM is to a person authorised by OFCOM in writing for the purposes of notices that impose requirements of a kind mentioned in that subsection, and such a person must produce evidence of their identity if requested to do so by a person in receipt of such a notice.
(8A) [F2 The power to give a notice conferred by subsection (1) does not include power to require processing of personal data that would contravene the data protection legislation (but in determining whether processing of personal data would do so, the duty imposed by the notice is to be taken into account).]
(9) The power conferred by subsection (1) does not include power to require the provision of information in respect of which a claim to legal professional privilege, or (in Scotland) to confidentiality of communications, could be maintained in legal proceedings.
(10) In this section—
  • “information” includes documents, and any reference to providing information includes a reference to producing a document (and see also section 102(11));
  • “regulated provider pornographic content” and “published or displayed” have the same meaning as in Part 5 (see section 79).

Amended text

This Section is shown as amended by Data (Use and Access) Act 2025 (see the annotations below), as incorporated in the text in force on 19 September 2026 as published on legislation.gov.uk.

Pending amendment (not yet in force)

legislation.gov.uk records the following amendment(s) to this Section that had not been brought into force on 19 September 2026 and are therefore not reflected in the text above:

  • s. 100(6)(a)(iii): coming into force by S.I. 2025/371, reg. 2(1)(d), (2) (in respect of section 66(1)(2)(7)-(10) and only so far as it relates to regulated user-to-user services)

Annotations

Textual Amendments

  1. F1 S. 100(7) omitted (30.9.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 124(2)(a), 142(1); S.I. 2025/982, reg. 2
  2. F2 S. 100(8A) inserted (30.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 124(2)(b), 142(1); S.I. 2025/982, reg. 2

Commencement Information

  1. I1 S. 100 not in force at Royal Assent, see s. 240(1)
  2. I2 S. 100(1)-(5) in force at 10.1.2024 by S.I. 2023/1420, reg. 2(z5)
  3. I3 S. 100(6)(a)(i) in force at 10.1.2024 by S.I. 2023/1420, reg. 2(z5)
  4. I4 S. 100(6)(a)(iii) in force at 7.4.2026 for specified purposes by S.I. 2026/262, reg. 2(1)(d)(2)
  5. I5 S. 100(6)(a)(iv) in force at 10.1.2024 for specified purposes by S.I. 2023/1420, reg. 2(z5)
  6. I6 S. 100(6)(a)(vi) in force at 10.1.2024 by S.I. 2023/1420, reg. 2(z5)
  7. I7 S. 100(6)(a)(vii) in force at 17.1.2025 by S.I. 2024/1333, reg. 2(1)(b)
  8. I8 S. 100(6)(b)-(n) in force at 10.1.2024 by S.I. 2023/1420, reg. 2(z5)
  9. I9 S. 100(7)-(10) in force at 10.1.2024 by S.I. 2023/1420, reg. 2(z5)

https://osa.digiphile.law/article/article-100.html

Text as at 19 September 2026.

This is an unofficial convenience version of the Online Safety Act 2023. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.