The Wikimedia Foundation this week confirmed that Ofcom, the United Kingdom's communications regulator, has decided Wikipedia does not currently meet the criteria for Category 1 status under the country's Online Safety Act. The nonprofit organization that operates Wikipedia and other Wikimedia projects received the notification on July 10, 2026, closing out more than a year of legal wrangling over how one of the internet's largest reference works should be classified under British law. According to the Wikimedia Foundation, Ofcom informed the organization as part of that same announcement that Wikipedia will remain on a watch list of platforms that do not presently qualify as Category 1 services but that could be moved into that category later, should the regulator choose to revisit its position.
The decision arrives nearly exactly one year after the Foundation first filed its judicial review challenge against the Categorisation Regulations underpinning the Act, and it settles, at least for now, a question that had loomed over the nonprofit encyclopedia since regulations took effect in February 2025. Yet the watch list mechanism means the underlying dispute is not fully resolved. Wikipedia has cleared the immediate threshold, but the structural uncertainty the Foundation warned about in its original filing persists, since Ofcom retains discretion to reassess at any time.
What Category 1 status would have required
Category 1 represents the most demanding tier of obligations under the Online Safety Act, a law that received royal assent in October 2023 and has been rolling out in phases ever since. According to the Wikimedia Foundation's own account of the case, Category 1 duties were originally designed for user-to-user services presenting the greatest risk to the public, and Parliament asked the Secretary of State for Science, Innovation and Technology to define precisely which platforms would meet that bar.
The threshold conditions, set out in secondary legislation that took effect on February 27, 2025, apply to a regulated user-to-user service if it has more than 34 million average monthly active UK users and uses a content recommender system, or if it has more than 7 million such users, uses a content recommender system, and also lets users forward or share content with each other. Ofcom's own research, published in March 2024, had estimated that somewhere between 12 and 16 services would likely meet one or both of these conditions, a number the regulator itself described as an appropriate size for the category, though it acknowledged that identifying every service on the list involved a degree of guesswork given how broadly the rules were drafted.
Had Wikipedia been designated, the Foundation would have faced several obligations at once. Chief among them was a requirement to verify the identity of large numbers of Wikipedia contributors, a duty that, combined with a related provision in the Act, would have let other users block content edits made by anyone who had not completed identity verification. The Foundation argued this combination risked the opposite of its intended effect: rather than curbing anonymous abuse, it could have let malicious actors block volunteer editors from correcting vandalism or misinformation unless those editors first surrendered their anonymity.
The legal challenge that preceded today's decision
The Wikimedia Foundation first signaled its intent to challenge the Categorisation Regulations on May 8, 2025, arguing in a post attributed to Phil Bradley-Schmieg, the Foundation's Lead Counsel, that the rules placed Wikipedia and its volunteer base at unacceptable risk of Category 1 duties crafted for the UK's riskiest commercial platforms. The Foundation formally filed its legal challenge on July 17, 2025, naming a UK-based volunteer contributor known by the username Zzuuzz as a joint claimant alongside the organization itself. According to the Foundation, the volunteer's identity has remained confidential throughout the proceedings, protected under court order.
High Court hearings took place at the Royal Courts of Justice in London on July 22 and 23, 2025, under case reference AC 2025LON001365. Stephen LaPorte, General Counsel at the Wikimedia Foundation, said at the time that the court had an opportunity to set what he called a global precedent for protecting public interest projects online, describing Wikipedia as the only top-ten website operated by a nonprofit and noting its role as one of the highest-quality datasets used in training large language models.
The High Court of Justice ruled on the matter on Monday, August 11, 2025, dismissing Wikimedia's challenge to the Categorisation Regulations themselves. The judge did not simply side with the government, however. According to the Foundation's own summary of the ruling, the presiding judge recognized what he called the significant value of Wikipedia and its safety for users, while also acknowledging the potential damage that wrongly assigned Category 1 duties could inflict on the human rights of Wikipedia's volunteer contributors. The judgment reportedly stated that the ruling did not give Ofcom and the Secretary of State a green light to implement a regime that would significantly impede Wikipedia's operations, and it suggested the regulator could face legal consequences if it failed to protect Wikipedia and its users going forward. The judge further indicated that Ofcom might need to adopt a particularly flexible interpretation of the categorization rules, or that Parliament itself might need to amend those rules.
On September 12, 2025, the Wikimedia Foundation announced it would not appeal the High Court's dismissal, stating instead that it would continue to monitor how the court's guidance was followed as the Act moved toward full implementation. That decision left the categorization question in Ofcom's hands, without further litigation pending, until today's notice arrived.
Why the regulations proved contentious
The Foundation's underlying objection was never to the Online Safety Act as a whole, nor to the existence of Category 1 duties in general. Its challenge focused specifically on how the Categorisation Regulations defined the conditions that would trigger those duties, arguing the definitions were broad enough to sweep in a nonprofit encyclopedia despite having little in common with the commercial social media platforms the duties were designed for.
Three concepts drew particular criticism. The first was the definition of a content recommender system, which the regulations describe as any algorithm that determines or otherwise affects how a user encounters content. The Foundation argued this definition was so broad it could capture tools built specifically to combat harmful content, such as the New Pages Feed that Wikipedia's volunteer reviewers use to screen new articles, or even lesser-used features like translation recommendations. The second concerned content forwarding or sharing functionality, a term the Foundation said the regulations left undefined, creating risk that ordinary features, such as the mechanism that lets Wikipedia users select the site's daily featured image, could count toward Category 1 thresholds. The third involved how the rules measured platform popularity, since the thresholds counted total monthly UK users without distinguishing between someone who visits Wikipedia briefly once a month to check a fact and someone who spends hours daily on a social feed built around algorithmic engagement.
Wikipedia's volunteer-driven content model sat at the center of these arguments. According to the Wikimedia Foundation, nearly 260,000 volunteer contributors worldwide write and curate Wikipedia's content, enforcing policies designed to keep the encyclopedia neutral, fact-based, and sourced to reliable references. That editing community, the Foundation said, has built Wikipedia into a resource spanning more than 300 languages and roughly 65 million articles, with more than 15 billion monthly page views worldwide. The Foundation pointed to volunteer efforts to keep Wikipedia's coverage of the Southport murders neutral and accurate, even as misinformation about the same events spread on other platforms, as an example of the moderation model it said Category 1 duties would undermine rather than strengthen.
Wikipedia's UK footprint also featured prominently in the Foundation's arguments. According to the Foundation, content across Wikipedia and other Wikimedia projects was viewed 776 million times in the UK in the month preceding the July 2025 filing, and the site hosts material contributed by UK cultural institutions including the British Library and the Wellcome Collection. The Welsh-language edition of Wikipedia, the Foundation noted, is the most visited Welsh-language website in the world and forms an official part of the school curriculum in Wales.
The regulatory backdrop
Wikipedia's case did not unfold in isolation. The Categorisation Regulations came into force on February 27, 2025, and Ofcom had, by that point, already begun issuing draft information notices to services it believed might meet the relevant thresholds, seeking data needed to make categorization assessments. PPC Land reported that the Foundation's legal challenge was the first court action brought against the categorization framework since those regulations took effect, and the first Online Safety Act case to include a volunteer user as a co-claimant rather than only the platform operator.
The Act's implementation had already produced friction well beyond Wikipedia's case by the time the categorization dispute reached the High Court. PPC Land documented how Proton VPN recorded a surge exceeding 1,400 percent in UK signups within hours of the Act's age verification requirements taking effect on July 25, 2025, as users sought ways around mandatory identity checks for adult content access. That enforcement mechanism, which grants Ofcom authority to direct payment processors, advertisers, and internet service providers to cut off noncompliant platforms, later became the basis for a separate legal challenge. PPC Land covered how 4chan Community Support LLC and Lolcow, LLC, which operates the forum Kiwi Farms, filed a federal lawsuit against Ofcom on August 27, 2025, alleging the regulator's enforcement notices violated First Amendment protections and were improperly served under international treaty procedures.
The categorization register itself, meanwhile, has faced repeated delay. According to Ofcom's own published guidance, the regulator had originally aimed to publish its register of categorized services and its list of emerging Category 1 services in 2025, but that timeline slipped, in part because of the Wikimedia litigation. Industry group techUK reported that Ofcom, in correspondence with the Secretary of State for Science, Innovation and Technology dated November 12, 2025, confirmed the register's publication had been pushed back to around July 2026, with a representations process planned for early 2026 to give services flagged as meeting threshold conditions a chance to comment on provisional decisions before any register is finalized. That representations process appears to be the mechanism through which Wikipedia's own non-designation, and its placement on the watch list, was ultimately determined.
What the watch list means going forward
Ofcom's decision to place Wikipedia on a watch list, rather than simply closing the question, reflects language the Foundation itself used in describing the risk it never considered fully eliminated. In its statement following today's notice, the Foundation said it remains relieved by Ofcom's agreement that Wikipedia is not currently a Category 1 service, but it described future Category 1 designation as an ongoing threat to Wikipedia, to open knowledge more broadly, and to the privacy and safety of the volunteer community that produces the site's content. Without clearer and more durable limits on how categorization works, the Foundation said, Wikipedia remains exposed should Ofcom revisit its decision at some future point.
The Foundation indicated it intends to keep pressing for a narrower scope to both the Act and its Categorisation Regulations, framing today's outcome as a reprieve rather than a resolution. That framing matters for how the broader online safety compliance landscape reads this decision. Ofcom's discretion to reassess Wikipedia at any time means the platform's status carries less certainty than a permanent exemption would, even though the immediate practical effect, avoiding identity verification duties, user-blocking mechanisms, and the other obligations tied to Category 1, is the same for now as it would be under a firmer ruling.
For services watching how Ofcom applies its own categorization criteria, Wikipedia's case offers a data point on how the regulator handles a platform whose scale would suggest inclusion under a literal reading of the thresholds, but whose operational model differs sharply from the commercial, engagement-driven services the rules were written to address. Whether that distinction holds as Ofcom works through its broader representations process, and eventually publishes the full categorization register expected around July 2026, remains to be seen.
Timeline
- October 26, 2023: The Online Safety Act receives royal assent.
- February 27, 2025: The Categorisation Regulations, setting Category 1, 2A, and 2B thresholds, come into force.
- May 8, 2025: The Wikimedia Foundation announces its intent to challenge the Categorisation Regulations.
- July 17, 2025: The Foundation formally files its legal challenge at the High Court, naming volunteer contributor Zzuuzz as a joint claimant.
- July 22 to 23, 2025: High Court hearings take place at the Royal Courts of Justice in London.
- August 11, 2025: The High Court of Justice dismisses the Foundation's challenge to the Categorisation Regulations.
- September 12, 2025: The Foundation announces it will not appeal the High Court's ruling.
- November 12, 2025: Ofcom confirms in correspondence with the Secretary of State that the categorization register's publication has moved to around July 2026.
- July 10, 2026: Ofcom notifies the Wikimedia Foundation that Wikipedia does not currently meet Category 1 criteria but will remain on a watch list for possible future reassessment.
Related PPC Land coverage
- Wikipedia challenges UK Online Safety Act categorization rules covers the Foundation's July 17, 2025 filing of its judicial review challenge, including the thresholds Category 1 designation would have triggered and the joint claim brought alongside volunteer contributor Zzuuzz.
- UK online safety law sparks massive VPN surge documents the more than 1,400 percent jump in UK VPN signups Proton VPN recorded after the Act's age verification duties took effect on July 25, 2025, providing broader context on user response to the law's rollout.
- US websites sue UK regulator over Online Safety Act enforcement reports on the August 27, 2025 federal lawsuit filed by 4chan and Kiwi Farms operator Lolcow, LLC against Ofcom, illustrating the wider legal pushback the Act has generated among platforms operating outside the UK.
Summary
Who: The Wikimedia Foundation, the nonprofit that operates Wikipedia, and Ofcom, the UK's communications regulator responsible for enforcing the Online Safety Act.
What: Ofcom notified the Foundation that Wikipedia does not currently meet the threshold conditions for Category 1 status under the Act, while also placing Wikipedia on a watch list of platforms that could be reassessed and moved into Category 1 in the future.
When: Ofcom's notice arrived on July 10, 2026, following a High Court dismissal of the Foundation's legal challenge on August 11, 2025, and the Foundation's decision not to appeal that ruling on September 12, 2025.
Where: The underlying legal challenge was heard at the Royal Courts of Justice in London, under UK Online Safety Act regulations that apply to platforms with a defined threshold of UK users.
Why: Category 1 status would have required the Foundation to verify the identities of Wikipedia contributors and implement related user-blocking mechanisms, obligations the Foundation argued were designed for commercial social media platforms and would have undermined the privacy protections that keep its volunteer editing community functioning. Today's decision avoids those duties for now, but Ofcom's retained discretion to reassess means the underlying question the Foundation raised in its original legal challenge has not been permanently settled.
Discussion