Meta has appealed Ofcom's decision to place WhatsApp and Instagram in Category 1 of the UK Online Safety Act, the tier with the heaviest duties. Meta says some of those duties were not designed for private one-to-one and small-group messaging. It says it is contesting Ofcom's interpretation of the law, not the law itself (MediaNama). The appeal is easy to dismiss as one more big-tech delay tactic. It also raises a question about how the Act's most demanding duties apply to private messaging, and Ofcom will have to answer it.
The strongest case for Ofcom
The case for Ofcom is straightforward. Parliament wrote size-and-feature thresholds into secondary legislation, and Ofcom applied them. Under the Category 1, 2A and 2B threshold regulations, a user-to-user service qualifies if it has more than 34 million UK users and uses a content recommender system. It also qualifies if it has more than 7 million UK users, a recommender system, and a feature for forwarding or sharing content (Ofcom, additional duties). Ofcom says those figures are roughly half and roughly a tenth of the UK population.
An objective test avoids regulators picking favourites. Ofcom's register, published on 30 June 2026, lists eleven Category 1 services: Facebook, Instagram, TikTok, YouTube, X, WhatsApp, Snapchat, Reddit, Roblox, Quora and Pinterest (Ofcom register). Meta is not being singled out. WhatsApp also has features, such as forwarding, that the thresholds treat as risk amplifiers. A service that lets people spread content quickly is not obviously exempt because much of its traffic is private.
Where the fit problem is real
The additional duties cover user-empowerment tools, protections for news-publisher and journalistic content, content of democratic importance, fraudulent-advertising safeguards, transparency reporting and more thorough handling of illegal content (Ofcom, additional duties; MediaNama). Most of these assume a public or semi-public feed where content is ranked, promoted and visible to strangers. That model fits Instagram much better than a small group chat between family members.
A proportionate regime would ask whether each duty makes sense for the service it is applied to. Meta's stated aim is that the regime be applied "proportionately, accurately and consistently." The wording is self-serving, but the principle is sound, and it matches what the Act's own risk-based design should deliver. Blanket application of feed-oriented duties to private messaging risks pushing providers toward monitoring or tighter controls on private communications. That would cost user privacy and free expression, and it is hard to reconcile with the pro-speech case for keeping private channels private.
Meta's own description also concedes a narrower point. It says it is challenging how the Act is interpreted, not the Act. That leaves Ofcom room to fix the problem itself. It could be explicit in guidance about which duties bind which functionalities, so that a service's classification does not mechanically import every obligation.
Why the optics cut against Meta
The timing is awkward for Meta. This is its second challenge to Ofcom this year. In May 2026 it contested how Ofcom calculates regulatory fees, arguing that basing them on global revenue is disproportionate (Eastern Eye). Roblox and Quora are contesting their own designations, and TikTok and X have brought separate actions over information disclosures (MediaNama). Meta's line is that it is joining others in "challenging specific aspects of implementation."
Damian Collins, a former tech minister, has accused Meta of obstructing implementation, noting that tech firms have "limitless resources" for regulatory challenges (MediaNama). The concern has substance. The stakes are large: the government explainer says companies can be fined up to £18 million or 10 percent of qualifying worldwide revenue, whichever is greater (GOV.UK). Firms facing that exposure have every reason to test the boundaries, and a regulator that is always in court has less capacity to police real harms.
Yet litigation is also how a new regime gets its edges defined. A regulator confident in its reading should welcome the chance to have it tested. If Ofcom's interpretation is sound, a tribunal will say so and the industry will have clarity. If it is not, the correction will be cheaper now than after duties are being enforced.
What to watch
First, whether Ofcom concedes anything on scope. A narrow clarification that certain duties apply only to feed-like or broadcast-like functions would resolve much of the dispute without a ruling. Second, whether the appeal delays the duties. This report does not establish that the designation is suspended, so the practical effect on compliance timelines is unclear. Third, whether the outcome creates a template. Roblox and Quora argue different points, but a decision on how categorisation interacts with service design will affect all of them.
The right outcome is neither a Meta victory nor a Meta defeat. It is a workable rule under which the Act's strongest duties attach to the features that create the risks they target. Regulation that is precise about function is easier to comply with, easier to enforce and less likely to erode private communication.