United Kingdom: Office of Communications announced investigation into Nippybox over alleged failure to comply with illegal content duties under Online Safety Act

On 10 June 2025, the Office of Communications (Ofcom) announced an investigation into Nippybox, the provider of a file-sharing service (Case No. CW/01302/06/25). The investigation concerns potential non-compliance with obligations under the Online Safety Act 2023. Specifically, Ofcom is examining whether the provider failed to respond to statutory information requests, complete and retain a suitable and sufficient illegal content risk assessment, and implement safety duties relating to illegal content. These duties apply to regulated user-to-user services and came into effect on 17 March 2025. They include obligations to assess risks and adopt measures to prevent exposure to priority illegal content, including image-based child sexual abuse material (CSAM). As part of its enforcement programme, Ofcom issued an information notice to the Nippybox provider on 1 April 2025, requesting a response by 1 May 2025. At the time the investigation was opened, no response or risk assessment record had been received. Ofcom states that compliance failures can result in fines of up to GBP 18 million or 10% of qualifying worldwide revenue, or court orders in the most serious cases.