# The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2026, Regulation 5: The organisation administrator, deputy organisation administrator, and authorised persons


(1) The registering party must—
(a) appoint a person to act as the main point of contact with the NCA (the “organisation administrator”), and
(b) appoint a replacement organisation administrator in the event that the person appointed under sub-paragraph (a) ceases to act in that capacity.
(2) The organisation administrator must be a senior manager or other individual whom the registering party considers has an equivalent appropriate role in the organisation.
(3) An organisation administrator may appoint an authorised person to be deputy organisation administrator.
(4) An organisation administrator or deputy organisation administrator may authorise one or more individuals within their organisation to report CSEA content to the NCA (each one is “an authorised person”).
(5) The provider and any third party provider must ensure that an authorised person does not share their login details to the online portal with any other person.
(6) Where an API is used to submit reports—
(a) the organisation administrator or deputy organisation administrator must be responsible for configuring and establishing the API process, and
(b) the registering party must provide a point of contact for reports submitted using the API.

---
Source: https://www.legislation.gov.uk/uksi/2026/268/regulation/5 (the official version)
Page: https://openlegislation.uk/online-safety-csea-content-reporting-by-regulated-user-to-user-service-providers-regulations-2026/regulation-5
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.