All you need to know about the Online Safety Act- from child safety to business risk
Warren Atkinson
Cyber Community Connector | Podcast Host | Head of Information & Cyber Security Recruitment | ECS & GTM Team Builder
💻 Latest Episode: https://youtu.be/tS4mTriuGdQ?si=UoGM4ndD_d8KvFwb
Protecting young people online: A necessary but complex endeavour
The Online Safety Act comes against a worrying backdrop: studies reveal that nearly one in ten UK children aged between 8 and 14 have been exposed to online pornography, with growing concerns around self-harm and extremist content impacting young minds. This legislation is a vital step towards shielding vulnerable users from material that can cause lasting psychological harm.
However, safeguarding children online brings significant challenges, particularly in terms of privacy and data protection. Age verification often involves processing sensitive personal data such as biometric images and official ID documents. Privacy advocates warn about potential overreach and misuse of this data, while concerns about weakening encryption and user anonymity are increasingly prominent. Families and businesses must navigate this delicate balance between effective protection and preserving fundamental privacy rights, a debate that is still evolving and will shape the digital future.
Industry reaction & the compliance conundrum
The response from the tech industry has been mixed and at times contentious. Leading platforms like Reddit and TikTok have invested heavily in new verification systems, partnering with trusted third parties to meet compliance deadlines. Conversely, some platforms such as BitChute and Gab have chosen to block UK users entirely, avoiding the costly infrastructure changes required. Regulators, led by Ofcom, are actively monitoring compliance, including scrutinising platforms that use unapproved or inadequate verification methods.
This patchy compliance landscape exposes deeper tensions between regulation, privacy, innovation, and freedom of expression. The Act introduces severe penalties, fines of up to 10% of global turnover- for breaches, yet tech companies warn that mandatory age checks could undermine encryption and privacy safeguards. Smaller platforms face an existential dilemma: invest significant resources to comply or simply withdraw from the UK market. Balancing child protection with digital rights remains a sensitive and ongoing challenge requiring careful oversight and dialogue.
Curious to learn which skills are in demand, career pathways and recruitment tips?
Practical Steps: Guidance for businesses & families
For businesses, particularly small and medium-sized enterprises (SMEs) affected by the Act, compliance is essential, not just to avoid penalties but as a critical component of cyber risk management. Organisations should begin with thorough audits of their current verification processes, prioritise secure and user-friendly age assurance solutions, and ensure staff understand privacy obligations. Transparency about data collection and protection helps build user trust, which is vital in today’s privacy-conscious world.
Families and households also play a key role in online safety. Simple, practical actions can significantly reduce risks for children and adults alike. Begin by setting up parental controls on all devices, using strong, unique passwords with a password manager, and educating family members on how to recognise phishing attempts and unsafe content. Keeping software and applications regularly updated closes security gaps, while reviewing privacy settings on social media platforms helps control data exposure. Collective awareness and education are the first line of defence in today’s complex digital environment.
Five easy steps to enhance your online safety this week:
Activate parental controls and content filters on all devices children can access.
Use password managers to create and store strong, unique passwords.
Educate children and family members about online scams and suspicious links.
Regularly update all software and applications to protect against vulnerabilities.
Review privacy settings on social media to limit data sharing and control visibility.
Transparency & trust as foundations for security
As the Online Safety Act marks a new chapter in digital responsibility, transparent handling of personal data is more important than ever. Businesses must go beyond mere compliance by clearly communicating to users what data is collected, why it’s needed, and how it is safeguarded. Robust security measures to protect sensitive verification data are essential to maintain trust and avoid damaging breaches.
Training employees on evolving legal and privacy requirements, along with engaging customers openly about safety and privacy commitments, will help organisations build resilience and credibility. In an era of growing regulation and public scrutiny, embracing ethical data management and proactive protection is not only good practice, it’s a vital competitive advantage that will safeguard organisations well into the future.
Learn more from the Department for Science, Innovation and Technology on this here, Online Safety Act explainer & Online Safety Act.
Introducing Alistair & Chris
We’re joined by Chris Eastwood and Alistair Kennedy (ACIIS) - two professionals with deep frontline experience in tackling cybercrime. Chris served as a British Army Combat Engineer before moving into law enforcement, where he worked with regional police forces and the National Crime Agency on complex investigations into hacking, fraud, and identity theft. Alistair spent over two decades in the police, specialising in cybercrime prevention and working directly with businesses to help them understand and counter digital threats. Together, they co-founded The Rybec Group, a cyber security consultancy that helps organisations move beyond checkbox compliance and build real-world resilience through certifications like Cyber Essentials and ISO 27001.
Why This Episode is a Must-Watch & Value You’ll Gain:
In this episode, we cover the real-world cyber security challenges facing UK SMEs, schools, and families- from AI-powered cyber threats targeting children to the hidden risks of over-relying on compliance frameworks like ISO 27001 and Cyber Essentials. Chris and Alistair share practical, experience-based strategies for defending against hackers, building a cyber-aware workforce, and recognising early warning signs of an attack. We also explore the realities of running a cyber security consultancy, the difference between genuine security and box-ticking, and the growing impact of global cyber conflicts on local businesses. Whether you're a business owner, educator, or aspiring security professional, this episode delivers clear, actionable advice with no BS, just hard-earned insights you can trust.
📺 Watch Full Session Here: https://youtu.be/tS4mTriuGdQ?si=UoGM4ndD_d8KvFwb
🎧 Listen Here: https://open.spotify.com/episode/0mOXAhIoeKw8Ayz5Zkugwa?si=10a676642c50438a
Short-form:
We trust you also find value in our Earlier Sessions:
Curious about startups, scaleups & VC’s? Check out episode Fifty-Six
Curious about the Databricks AI Security Framework 2.0? Check out our latest Live Stream.
Our Podcast Sessions and a range of "Shorts" can be found on YouTube, Spotify, Apple Podcast, X, Instagram, TickTock, Facebook.
✅ Follow, Rate, Subscribe, Like & Share - Simple Search: “Secure Cyber Connect”
SECURE | CYBER CONNECT COMMUNITY – UPDATES
A quick message for all to hear.... learn more HERE.
The DATATRIBE CHALLENGE 2025
If you’re an early stage, startup or scaleup in cyber security- this is for you!
This is open to entrants across the globe, submissions close Sep 12th. Learn more HERE.
EVENTS YOU SHOULD KNOW!
Join founders, innovators & investors from across the globe | 4th November.
SECURE | CYBER CONNECT, DataTribe, Access Venture Partners, Anthos Capital, Ardent Venture Partners, Ballistic Ventures, Bull City Venture Partners, Delta-v Capital, Dreamit Ventures, Edison Partners, Evolution Equity Partners, Forgepoint Capital, GALLOS Technologies, Gula Tech Adventures, JHH vc, Lookout Ventures, March Capital, USM Maryland Momentum Fund, Merlin Ventures, Munich Re Ventures, ONE9, Sands Capital, Squadra Capital, Dragos, Inc. Leo Scott, Robert Ackerman, Andy Hunn, Robert Ackerman, Justin (Jay) Adamson, SECURE | CYBER CONNECT Community & Podcast
If you're looking to get on the radar of top venture firms in cyber, check out Cyber Innovation Day 2025, register HERE.
Join the Cyber Leaders’ from across the UK & Benelux | 22nd – 23rd September, Belgium
The Cyber Leaders' Summit (CLS BNLX) is an exclusive, invite-only event held once a year in Brussels, bringing together senior cybersecurity leaders, decision-makers, and budget holders from across Belgium, Netherlands and Luxembourg.
Join your peers from across the UK | 30th Sept – 1st Oct, London
Join thousands of leading cybersecurity professionals at the International Cyber Expo (30 Sept – 1 Oct 2025, Olympia London) to explore cutting-edge tech from 100+ exhibitors, gain insights from global experts across 3 stages, and network with industry leaders from 85+ countries all under one roof!
Join AI, Cyber, Data & Technology Leaders | 1st – 2nd October, London
DTX London is where cutting-edge business transformation meets practical innovation, bringing together leaders in AI, cyber, data, and digital technology. Held at ExCeL London, the event empowers attendees to drive real change through collaboration, insight-sharing, and future-focused solutions.
How can we help to address your unique challenges?
We’re more than just a Recruitment Partner, check out our Solutions and Services.
🔗 The SECURE Cyber Connect Directory facilitates Strategic Introductions cross-sector, helping organisations tackle Cultural, Technological & Talent Acquisition challenges, build partnerships, and adapt to regulatory shifts.
A must read:
Reach Out to Warren Atkinson or Justin (Jay) Adamson to explore how we can collaboratively navigate the complexities of AI, Information & Cyber Security to build a safer digital future.
Curious to Learn More about the Community, Initiatives & Value provided, click the image below to access our Linktree.
BCS Chartered IT Professional
2whttps://www.bbc.co.uk/news/articles/cn72ydj70g5o
Cyber Community Connector | Podcast Host | Head of Information & Cyber Security Recruitment | ECS & GTM Team Builder
2wThe Online Safety Act is a significant step in protecting vulnerable users, but it also surfaces tough debates around data privacy and enforcement. This newsletter aims to provide a clear, impartial view while encouraging open dialogue. I'd be curious to hear from our network: What concerns or hopes do you have about this legislation? Please share your experience and let’s ensure a constructive conversation.
A must-read (and listen) for anyone navigating the shifting digital safety landscape. Warren breaks down the urgent need for stronger child protection without losing sight of privacy, encryption, and business impact. As tech, compliance, and ethics converge, the community conversation matters more than ever. We invite our network to explore the episode and share how your organisation is adapting.
The Online Safety Act isn’t just legal reform, it’s reshaping how cybersecurity talent, leadership, and strategy must evolve. Warren Atkinson outlines what both employers and professionals need to know, from risk audits to emerging compliance skills. Cyber roles are becoming more multidisciplinary, and leaders who grasp both privacy and policy will stand out. Know someone who should read this? Tag and share.