Skip to content

Online Safety Act updates#2004

Open
ArtOfCode- wants to merge 8 commits intodevelopfrom
art/online-safety-updates
Open

Online Safety Act updates#2004
ArtOfCode- wants to merge 8 commits intodevelopfrom
art/online-safety-updates

Conversation

@ArtOfCode-
Copy link
Member

  • Add options for complaints about process adherence or failure in statutory duty

@codecov
Copy link

codecov bot commented Mar 3, 2026

Codecov Report

❌ Patch coverage is 86.66667% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.75%. Comparing base (de29259) to head (31fde79).

Files with missing lines Patch % Lines
app/controllers/complaints_controller.rb 86.66% 2 Missing ⚠️
Additional details and impacted files
Components Coverage Δ
controllers 75.90% <86.66%> (+0.05%) ⬆️
helpers 85.09% <ø> (ø)
jobs 66.88% <ø> (ø)
models 93.01% <ø> (ø)
tasks 61.11% <ø> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ArtOfCode- ArtOfCode- marked this pull request as ready for review March 22, 2026 15:46
@ArtOfCode- ArtOfCode- requested review from Oaphi and cellio March 22, 2026 15:47
Copy link
Member

@cellio cellio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for putting this together. I reviewed by going through the training in the UI and leaving comments in the HTML source here, so order of comments in the diff is not the order I left them in (mentioning because you might see some things that came out as forward-references but weren't written that way).

A few small comments on content, and two other issues:

  • Should the network-specific parts, like your name, be behind global site settings so other deployments don't pick them up?
  • Can we log completion somewhere beyond in the DB? (I looked in the audit log.)


<h3>Our responsibilities</h3>
<p>
Responsibility for compliance with the requirements of the Act obviously falls on us (meaning the Codidact Foundation
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it practical to make this part configurable (org name and contact as global settings, whole paragraph as a setting, something else)? You probably don't want your name leaking out as the contact person for other instances.

Or, alternatively, put the entire training behind a global setting, so that instances that don't care (such as private ones outside the UK) don't need to edit contacts etc at all.

<ul>
<li>Delete it to remove it from public view</li>
<li>
Escalate it to the Community Team straight away: either ping us in Discord, or flag it yourself and escalate your
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should they use the reporting form for this? If it is OSA-grade content we'd need to file a report ourselves anyway, so why not have the mods do it and use our existing notification channels? Plus, this gives us a way to have back-and-forth discussion on the record if we need to.

Human trafficking encompasses a wide range of harmful activities. It can involve modern slavery, and victims and
survivors include adults and children. It is estimated that there were 122,000 people living in modern slavery in
the UK in 2021. Notable forms of human trafficking where harm can manifest online include sexual exploitation and
abuse, forced labour, and criminal exploitation such as county lines exportation of illegal drugs.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm having trouble parsing "criminal exploitation such as county lines exportation of illegal drugs" around "county lines".

<div class="has-font-size-caption">
<div class="widget">
<div class="widget--body">
<h4>Epilepsy trolling</h4>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I expect we'll get questions about this, since what's problematic for epilepsy sufferers is not well-known beyond rapidly flashing lights. Can we say a little more about what characteristics such content would have? (I mean a sentence or two, not a paragraph.)

It's important that illegal content is handled consistently in order to ensure that we are able to meet the statutory
requirements of us, to protect our users, and to enable us to be transparent with our communities. The way in which
illegal content is handled is set out in our Online Safety & Illegal Content Policy & Procedure, OP02 &mdash; you can
find a copy of this <a href="https://codidact.org/OP02">here</a>.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not yet. Also, might be another case where we want configuration rather than a baked-in link.

</p>
<ul>
<li>
Delete it, using the "delete" button for the post or comment, to remove it from public view. Deletion doesn't
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would remove the "doesn't completely remove" part, as we're not asking mods to make legal determinations anyway -- we're asking them to remove it from (most) view and raise it with us.

</li>
<li>
Escalate it to the Community Team. If a community member has flagged the post, you can escalate the flag to us; this
will send an email notifying us. If not, you can ping any of us in Discord, or flag the post yourself and escalate
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As mentioned in another comment, why not ask them to use our reporting tool for consistency and better tracking?


<p>
It's important that illegal content is handled consistently in order to ensure that we are able to meet the statutory
requirements of us, to protect our users, and to enable us to be transparent with our communities. The way in which
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would add (after the first sentence) something like "We are not asking our volunteer moderators to make legal determinations; we are asking you to help us meet our legal obligations by making us aware of content you encounter that could violate the law." I want to reassure them that, amidst all this legal language about so many kinds of illegal content, they are not on the hook -- we are. They are volunteers who are assisting us.


<p>
Thank you for taking the time to go through this training. We appreciate that these are often difficult and sensitive
topics, but your understanding and assistance help us to create safe communities for all our users.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider adding something like: As moderators you are likely to see problems before we do, and we appreciate your help in bringing them to our attention.

</p>

<%= form_tag osa_training_complete_path, method: :post do %>
<%= submit_tag 'Mark as complete', class: 'button is-filled is-primary' %>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I expected this to show up in the audit log, but after completing training as a mod, I didn't see an entry as an admin. Where are we recording it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants