← Back to context

Comment by wizzwizz4

7 months ago

The actual rules are vulnerable to this attack. https://www.legislation.gov.uk/ukpga/2023/50

If you think the attack won't be attempted, you've never been responsible for an internet forum.

Can you explain what you mean by "this attack"?

They'll submit a complaint to the regulator that you've not done a risk assessment?

I've tried submitting issues to the ICO before but didn't have enough for them to go on and so the other company was never contacted.

  • This is Ofcom, not the ICO; and stuff like "flood the site with child abuse material" (not in your risk assessment, why would it be? this is a public forum about cycling and nobody's ever done that before) and try to get you prosecuted for not having adequate protections in place.

    • Their examples of it being right to say you're low risk have a key part about it not happening before. Medium risk example had "has had warnings of csam being shared before from international organisations and has no way of spotting it happening again".

      You don't have to stop everything happening to comply.

      So is the scenario you're picturing that someone spams child porn, complains you don't stop it and makes you add a URL filter? Would you do something different if someone was spamming csam anyway?

      1 reply →