Schedule 3: Timing of providers’ assessments User-to-user services likely to be accessed by children Section 11: Children’s risk assessment duties
This section sets out the children’s risk assessment duties for user-to-user services that are likely to be accessed by children.
	Subsection (5) requires service providers to notify OFCOM about content they identify that is harmful to children but does not fall under any categories of content specified as primary priority or priority content that is harmful to children under sections 61 and 62, as well as the incidence of such content on the service.
	Subsection (6) lists the factors that the service provider must consider as part of their children’s risk assessment. This requires services to specifically consider how the design of the service, such as its functionalities and algorithms, affects the level of risk of harm to children. This includes, for example, how easily and quickly content can be shared and the use of features and functionalities which affect how much children use the service. This subsection requires the provider to take into account the risk profile (which would be published by OFCOM under section 98) that relates to the kind of service it provides.
	This section is not intended to capture risks of harm arising from breaches of existing data protection law.
	OFCOM have a duty under section 99 to issue guidance to assist service providers to carry out their children's risk assessments.