Schedule 11: Categories of regulated user-to-user services and regulated search services: regulations Chapter 3: Risk assessments of regulated user-to-user services and regulated search services Section 98: OFCOM’s register of risks, and risk profiles, of Part 3 services
Subsection (1) of this section places a duty on OFCOM to identify and assess the risks of harm to individuals in the United Kingdom presented by in-scope services. These risk assessments must cover the risks of harm to individuals in the United Kingdom presented by illegal content and content that is harmful to children. Risk assessments for user-to-user services must also cover the risks of harm presented by the use of such services for the commission or facilitation of priority offences. OFCOM must publish a register of risks of Part 3 services which reflects the findings of the risk assessments carried out.
	Subsection (5) sets out that OFCOM must develop risk profiles for different groupings of regulated services to assist them in complying with their risk assessment and safety duties. OFCOM should categorise these services as they consider appropriate. This must take into account the services’ characteristics, which include user base, business model, governance and other systems and processes (see subsection (11)), the risk levels, and any other relevant matters identified in its risk assessment.