Ofcom's Online Safety Act Briefing: Clarity or More Confusion for Dating Apps?

Dating operators will hear directly from Ofcom next week about what the UK's Online Safety Act actually requires them to do, when Senior Associate Karim Palant joins the Global Dating Insights Conference for a fireside chat on 6 February. The timing is deliberate. Enforcement mechanisms are now in place, financial penalties are substantial, and the regulator that spent decades overseeing broadcast television is now holding platforms legally accountable for user safety.

According to the conference programme, Palant will explain how the Act applies to both dating and social apps, outline specific compliance obligations, and detail the penalty structure. The session is accepting pre-submitted questions, a format that signals Ofcom recognises how much uncertainty remains across the industry about practical implementation.

Create a free account

Unlock unlimited access and get the weekly briefing delivered to your inbox.

Register free

No spam. No password. We'll send a one-time link to confirm your email.

Ofcom's new remit extends far beyond broadcasting

The regulatory expansion here is significant. Ofcom built its reputation enforcing standards for broadcasters and managing spectrum allocation for telecommunications. The Online Safety Act hands it enforcement authority over digital platforms, a remit that includes dating apps alongside social media giants and user-generated content sites.

What distinguishes this regime from predecessor frameworks is the enforcement toolkit. Financial penalties reaching 10 per cent of worldwide revenue for serious breaches represent a step-change from the compliance theatre that characterised earlier attempts at platform regulation. Match Group (MTCH) reported $3.19 billion in revenue for 2023; Bumble (BMBL) brought in $935 million. Ten per cent of those figures would materially affect operating margins and investor sentiment.

The Act also grants Ofcom the power to impose business disruption measures and pursue criminal action against senior managers in cases of non-compliance. Dating platforms face distinct compliance challenges compared to broader social networks. The intimacy of the use case creates specific vulnerability vectors.

Users seeking romantic connection disclose personal information more readily, meet strangers in private settings, and may ignore warning signs they'd heed elsewhere. According to the National Crime Agency, romance fraud cost UK victims £92 million in 2022. Grooming, financial scams, and harassment flow directly from the romantic pretext that defines the product.

What compliance actually requires in practice

The Act imposes several categories of duty on platforms. User-to-user services — which includes every dating app — must conduct risk assessments identifying reasonably foreseeable harms, implement proportionate systems to mitigate those risks, and maintain mechanisms for users to report harmful content. Platforms likely to be accessed by children face additional age verification and age-appropriate design requirements.

That's the legislative language. What product and compliance teams need to know is what those duties mean in practice. How granular must risk assessments be? What safety features satisfy the mitigation standard? Which age verification technologies meet the threshold?

These questions have circulated through dating industry Slack channels and compliance forums for months. Operators have made educated guesses, but uncertainty remains about whether these measures satisfy regulatory expectations or merely create the appearance of compliance.

Some have deployed enhanced verification, others have expanded content moderation teams, and several have redesigned reporting flows. The pre-submitted questions format suggests Ofcom understands this confusion. Rather than a lecture on legislative intent, the session structure implies Palant will address specific operator concerns.

That approach makes sense. Clarity serves both regulator and industry. Ofcom wants platforms to comply; operators want to know how. Ambiguity benefits neither party and leaves users unprotected whilst companies hedge their compliance bets.

Enforcement timeline and competitive implications

Ofcom began accepting complaints under the Online Safety Act in late 2024, but full enforcement action is still ramping up. The regulator has focused initial efforts on illegal content duties, with legal but harmful content requirements following a staged implementation. Dating platforms fall clearly within scope, but no major enforcement action against a dating operator has been publicly disclosed.

That lag creates an opening. Operators who move decisively on compliance can differentiate on safety, a positioning that carries commercial value as trust crises continue to affect conversion and retention. Those who wait risk being made examples. When Ofcom does pursue its first significant enforcement case against a dating platform — and the when here is more relevant than if — the penalties and publicity will concentrate minds across the industry.

Smaller operators face particular pressure. Enterprise-scale platforms can absorb the cost of dedicated trust and safety teams, sophisticated moderation systems, and external counsel to interpret regulatory requirements. Independent apps and regional players lack that infrastructure. For them, compliance becomes an operating cost that compresses already thin margins.

Regulatory burden favours incumbents, a dynamic that will likely accelerate consolidation. Next week's session will clarify whether Ofcom's approach leans prescriptive or principles-based. Prescriptive guidance — specific technical requirements, defined verification methods, quantified moderation response times — makes compliance straightforward but inflexible.

Principles-based regulation allows product teams to innovate safety features but creates interpretive risk. Dating operators need to know which model Ofcom will enforce, because it determines how they build for the next three years.

D