# The Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2026, Regulation 9: Data protection requirements


Where data protection legislation does not apply, the provider, when processing personal data in compliance with these Regulations must take steps to ensure appropriate security and confidentiality of the data.

---
Source: https://www.legislation.gov.uk/uksi/2026/268/regulation/9 (the official version)
Page: https://openlegislation.uk/online-safety-csea-content-reporting-by-regulated-user-to-user-service-providers-regulations-2026/regulation-9
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.