Recognise medical privacy breaches of vulnerable people as online harm.

Background

Amend or clarify the Online Safety Act 2023 & Ofcom guidance to recognise disclosure of medical information about children & vulnerable adults who may lack capacity or be unable to meaningfully consent as a safeguarding risk within Ofcom’s risk framework, & require platform reporting & mitigation.

Additional details

The Online Safety Act 2023 does not clearly recognise the sharing of medical information about children and vulnerable adults who may lack capacity or be unable to meaningfully consent as a safeguarding risk. Health data is protected by data protection law, but platforms are not required to treat repeated or monetised disclosure as an online safety concern. We call on the Government to recognise these disclosures within Ofcom’s risk framework and require platform reporting and safeguards.