The parent company of Facebook and Instagram is contesting the methodology Ofcom uses to set charges under the landmark digital safety legislation, according to a report first published by the Guardian. Meta argues that basing penalties on a company's qualifying worldwide revenue (QWR) is flawed, a position that, if upheld, would substantially reduce the financial exposure of every large international platform operating in the UK.

For UK-based digital businesses and scale-ups already investing to meet their own Online Safety Act obligations, the outcome carries real weight. A diluted fines regime for global giants risks creating a two-tier compliance landscape in which domestic operators bear proportionally heavier consequences than their largest competitors.

What Meta is challenging, and why global revenue matters

At the heart of Meta's claim is a simple but consequential question: should a UK regulator be able to size its penalties against the entire global turnover of a foreign-headquartered company?

Under the Online Safety Act, Ofcom can impose fines of up to 10% of qualifying worldwide revenue or £18 million, whichever is higher. Meta's parent company reported approximately $165 billion in global revenue for 2025, according to its public filings. That means the theoretical maximum penalty runs into the tens of billions of dollars, a figure that dwarfs any fine a purely domestic operator could face.

Meta's legal team contends that this approach is disproportionate, as reported by the Guardian. The company is not, at this stage, disputing that Ofcom has the power to regulate platforms under the Act. Instead, the challenge is directed at the regulator's methodology for calculating both ongoing fees and potential fines.

The case marks the first major judicial review of Ofcom's penalty framework since the Online Safety Act received Royal Assent in October 2023 and enforcement duties began phasing in from mid-2025.

How the Online Safety Act fines regime works

The Online Safety Act established a tiered enforcement model. Ofcom's duties include setting codes of practice, issuing compliance notices, and, where platforms fail to meet their obligations, imposing financial penalties.

The 10% of QWR ceiling was designed as a deterrent. Parliament chose a global revenue base deliberately, reasoning that fines pegged to UK-only income would be negligible for companies whose British operations represent a small fraction of total earnings. The £18 million floor ensures that even smaller platforms face meaningful consequences.

This approach mirrors established precedent elsewhere. The EU's Digital Services Act permits fines of up to 6% of worldwide turnover. The UK's own Competition and Markets Authority already calculates penalties on a global revenue basis in competition enforcement. By aligning the Online Safety Act with these frameworks, legislators sought to signal that the UK would not accept a regulatory discount simply because a platform is headquartered abroad.

Ofcom also uses QWR to calculate the annual fees that regulated services must pay to fund the regulator's oversight work. Meta's challenge covers both the fee and the fine methodology, meaning a successful claim could reduce the company's routine financial obligations to Ofcom as well as its exposure in any future enforcement action.

Implications for UK digital businesses and scale-ups

The practical consequences of this case extend well beyond Meta's own balance sheet.

UK-based platforms, social networks, messaging services, and user-generated content sites are subject to the same legislation. Many have spent significant sums building compliance teams, implementing age verification, and redesigning content moderation systems to meet Ofcom's codes of practice. For these firms, fines based on worldwide revenue and UK revenue are effectively the same number. There is no jurisdictional discount available to them.

If Meta's challenge succeeds and penalties for international platforms are recalculated on a UK-revenue-only basis, the deterrent effect shrinks dramatically. A platform generating 95% of its income outside Britain would face a maximum fine based on a fraction of its real economic power. Domestic competitors, by contrast, would remain exposed to the full force of the regime.

This asymmetry matters for several reasons. First, it could weaken compliance incentives for the largest platforms, precisely the services that carry the greatest volume of harmful content and pose the most significant child safety risks. Second, it risks creating an uneven playing field in which UK operators invest more heavily in safety measures, relative to revenue, than global rivals. Third, it sends a signal about the enforceability of British regulation against multinational technology companies at a moment when the government has staked significant political capital on the Online Safety Act.

Trade bodies representing UK technology firms have not yet issued formal statements on the case. But the concern within the domestic industry is clear: if global platforms can litigate their way to lower penalties, smaller operators left bearing the full proportional cost may question whether the regulatory burden is fairly distributed.

The broader regulatory ripple effect

Meta's argument, if accepted by the court, would not exist in isolation. The principle that a UK regulator can fine on the basis of global revenue underpins enforcement across multiple frameworks, including competition law and data protection. A ruling that undermines that principle in the context of the Online Safety Act could invite similar challenges elsewhere, potentially weakening the deterrent architecture that regulators have built over the past decade.

What happens next: timeline and possible outcomes

The judicial review process in England and Wales typically begins with a permission stage, in which a judge decides whether the claim is arguable. If permission is granted, a full hearing follows, usually within several months. Appeals could extend proceedings further.

Several outcomes are possible. The court could dismiss Meta's claim entirely, affirming Ofcom's right to use global revenue as the basis for fees and fines. It could find that the methodology is lawful in principle but direct Ofcom to revise specific elements of its calculation. Or it could rule that the global revenue approach is disproportionate, forcing Ofcom to adopt a narrower measure, most likely UK-only revenue.

Ofcom has not publicly commented on the detail of Meta's claim. The regulator is expected to defend its methodology robustly, given that the QWR model was set out in primary legislation and debated extensively during the Act's passage through Parliament.

For UK digital businesses watching from the sidelines, the case is more than a dispute between a regulator and a tech giant. It is a test of whether the Online Safety Act's enforcement framework can withstand challenge from the companies it was specifically designed to hold accountable.