Moderation changes
@pyj has stepped down as a moderator. Thank you for providing a sounding board for me for the last year and helping to foster a lively community.
With this, I’m the sole moderator, which doesn’t seem right. I think the forum should have at least two moderators aside from myself. I’m going to hold off on defining a process for selecting or electing new moderators until we see how the following discussion goes.
New Regulations
The UK Online Safety Act 2023 will be taking effect in a few months. This law requires operators of “user-to-user” services to perform a risk assessment and police the site for 17 different categories of illegal content or face significant penalties.
There is a bill proposing a similar law that will work it’s way through the US congress later this year, though it is facing strong opposition.
Proposed changes
We’d need to make some changes to be compliant with the new UK law:
- User to user private messaging is disabled, as we cannot moderate the content of these messages without running afoul of privacy laws.
- Any post containing an image, video, or file upload requires moderator approval.
The risk assessment also requires that we determine how many (if any) users are children. We’d need to collect location information to determine who is subject to UK laws. Collecting and retaining this demographic information is almost certainly in conflict with other privacy laws.
Avatar and profile photos present a risk, as Discourse (the forum software) doesn’t provide a good mechanism for moderating these images aside from disabling them completely.
Any post containing a link to an external site might also need to require approval. This seems to me like an excessive amount of work for moderators, so I’d be willing to rely on user flags to report links to illegal content.
Alternatives
My opinion is that it might be impossible to comply with these regulations in a way that reduces the liability of operating this forum to an acceptable level. To that end, I’ve compiled a list of alternative actions I could take:
- Do nothing. We aren’t the only site facing these challenges and there has been quite a bit of discussion about how the law is impractical for small sites. It is possible that the requirements may change before the law takes effect.
- Block UK users. If satisfying UK regulators requires violating the privacy and rights of users elsewhere, we may need to simply deny access to UK residents.
- Partial compliance. Implement a reasonable subset of these proposed changes and rely on the community to flag and report illegal content.
- Transfer ownership of the forum to another organization. The Ada Users Society seems like a logical choice, but I’m not sure that operating the forum is in their best interest or aligned with their goals.
- Shut down the forum. Obviously a last resort, but there are other platforms (eg. Reddit) that have more substantial resources (a legal department) to comply with these regulations.
What next
I’m not really sure where to go from here. I started working through the risk assessment process, but I have no idea how to prove things like “This site does not facilitate terrorism.” in a way that would hold up in a courtroom. I am not a lawyer.
I’d like to get feedback from the community before I make any decisions here. Please keep the politics in this thread to a minimum.