The Information Commissioner's Office (ICO) and Ofcom have jointly published a statement detailing the key areas where online safety regulations under the Online Safety Act intersect with UK data protection legislation, specifically concerning age assurance measures. This guidance is intended for services likely to be accessed by children and aims to provide practical clarity on how organisations can meet their obligations under both regulatory regimes.

Organisations providing online services accessed by children must review this statement to ensure their age assurance practices comply with both data protection requirements (e.g., UK GDPR, Data Protection Act 2018) and the Online Safety Act. While the statement itself is non-binding guidance, non-compliance with the underlying legislation could lead to enforcement actions from either the ICO or Ofcom, potentially involving significant penalties.