No compliance mutual for small community-run online services under the Online Safety Act

When the OSA illegal-content duties began in March 2025, roughly 300 small volunteer-run forums exited or migrated to Big Tech platforms, with at least 22 confirmed closures on tech lawyer Neil Brown's tracker; LFGSS and Microcosm shut and only partially returned. Ofcom offers a small-services hub and a revamped compliance guide. Every volunteer admin, including operators of Matrix homeservers and Fediverse instances, who are in scope, must still individually produce risk assessments with no shared legal defence, and neither an insurance product nor a template compliance stack exists. Open Rights Group campaigns on the issue without providing an operational compliance service. A December 2025 Westminster Hall debate aired the burden without resolution, and the categorisation register lands in July 2026.

Community self-hosting is the entry point to the whole sovereignty stack. If running a forum or homeserver is legally hazardous for volunteers, UK online community life centralises onto US platforms by default, against the Act's own intent.

A compliance co-operative offering model risk assessments, shared moderation tooling, a legal helpline and group insurance for community services, paired with a statutory proportionality carve-out for low-risk community services at the next OSA review.

// Build now: First artefact: model OSA risk-assessment pack plus mutual formation; statutory proportionality carve-out is the later state-led end-state.

The duties are already forcing volunteer forums to close, the co-operative fix is well understood and unprovided, and the July 2026 categorisation deadline adds pressure now.