A fifteen page thread here, similar threads elsewhere and over a thousand pages of definitions and legislation on Ofcom's site and I still haven't the first clue of what I actually need to do on any of my sites to comply
Don’t worry, Ofcom don’t either.
What is definitely known: if you have pornographic content, age gating (with “suitable measures” whatever the hell
that means) is required.
Everything else, go through the 17 categories and try to guess “are people likely to talk about this here” - does that sort of material fit inside your existing moderation rules (almost certainly yes), meaning that as long as you have reporting enabled, and you actually delete material that you deem against your TOS (=also against the criteria), that’s the start of good faith compliance.
Where it gets messy is whether people can upload images, whether people can use PMs (esp. PMs with attachments) and so on. Sadly even forums that have zero to do with sexual content have had groomers lurking - I have had that unfortunate job of extracting data from the DB to give to law enforcement to demonstrate the owner of the forum wasn’t aware of it.
I think PMs as a general comms method are problematic under this ruling, at least if you believe the P part ever meant
private. Many forums I’ve been on have (wisely) started outlining that PMs are intended to be private but that they’re not above being reviewed by admins in the event of reporting or other reasons that the admin might feel appropriate for taking a look at them. If PMs are to remain, there will clearly need to be some method by which they can be sensibly moderated (since it’s clear Ofcom thinks reporting may not be enough, especially in more private settings)
One thing I would like to see happen by default is a move towards a help desk type setup - that instead of “PM the admin team” in the event of a problem, it can instead go to an area that admins can review (perhaps not for all staff?) with the key being intentional restriction of scope - it takes away an amount of the need for PMing (not all, mind) by funnelling it to a place that implicitly deweaponises it. If miscreants can’t just randomly PM everyone, it’s one vector that can’t be misused.
Largely we’re still waiting on more guidance though.