Schedule 3: Timing of providers’ assessments Search services likely to be accessed by children Section 28: Children’s risk assessment duties
This section sets out the children’s risk assessment duties for providers of search services that are likely to be accessed by children. Service providers must carry out a suitable and sufficient children’s risk assessment by the relevant deadline specified in Schedule 3 and keep this up to date.
	Subsection (5) lists the factors that the service provider must assess in the children’s risk assessment. Services must consider factors including the extent to which the design of the service, its functionalities and the different ways in which the service is used may impact the level of risk of harm to children on the service. When carrying out its risk assessment, a service must take into account the risk profile that relates to the kind of service it provides.
	This section is not intended to capture risks of harm arising from breaches of existing data protection law.
	OFCOM have a duty under section 99 to issue guidance to assist service providers to carry out their children’s risk assessments.