Online Safety Policy

This policy sets out Children's Services approach to online safety, in line with the Online Safety Act 2023 and the latest statutory and best practice guidance. It applies to all staff, volunteers, and carers, and should be read alongside the Council's Acceptable Use Policy, Social Media Policy, and Code of Conduct.

Online safety is about protecting children, young people, and adults from risks to their safety and wellbeing when using digital technology. This includes risks from harmful content, grooming, cyberbullying, online abuse, and exposure to inappropriate material. The policy recognises the benefits of digital technology while addressing the risks, and is underpinned by a commitment to child-centred, trauma-informed, and non-blaming practice.

This policy document aims to provide employees with:

• An awareness of the dangers and risks faced by children and young people using electronic technology;
• Guidance for dealing with online safety issues and consequences for children young people, particularly those in care;
• An appreciation of professional boundaries and electronic technology;
• A reminder of the Council's expectations on internet usage by employees and the code of conduct.

Foster carers should be referred to the foster carer's handbook for advice on online safety. See: Internet, Photographs and Mobile Phones Procedure.

The CEOP information sheet will be made available for adopters.

Exposure to Harmful or Illegal Content

Children and young people may encounter inappropriate or illegal material online, including pornography, violent content, hate speech, or material promoting self-harm, suicide, or eating disorders. The Online Safety Act 2023 places duties on platforms to prevent children from accessing such content, but risks remain-especially on social media, video-sharing, and gaming platforms. Staff should be alert to the possibility that children may access this material intentionally or accidentally, and should provide guidance on safe browsing, privacy settings, and the use of child-friendly search engines. Age-appropriate filters and security settings should be in place on all devices used by children, and these should be regularly reviewed.

Mobile phones

Most mobile phones have internet access capability, and many young people use their phones in a similar way to a computer. It is therefore possible for children and young people to have instant and unsupervised access to the internet via their mobile phone. Virtually all phones have cameras and videos. This has led to the rise of incidents of violence and/or abuse being recorded and broadcast and "sexting" or "nude selfies" where users record and send indecent images or explicit text messages. Images and messages broadcast in this way are beyond the owner's control once they have been sent.

Grooming and Exploitation by Adults or Peers

Grooming can occur when adults or older peers use the internet to befriend, manipulate, or exploit children for sexual, criminal, or extremist purposes. This may happen over weeks or months, often through social media, gaming, or messaging apps. Groomers may pose as peers, offer gifts, or use flattery to build trust before exploiting the child. Staff should be vigilant for signs of grooming, such as secretive behaviour, changes in mood, or unexplained gifts. All concerns must be reported promptly to the Police and Children's Social Care, following the Referrals Procedure. The Serious Crime Act 2015 and the Online Safety Act 2023 have strengthened offences relating to sexual communication with a child and online grooming.

Instant/direct messaging and photo/video sharing

Instant/direct messaging is a form of simultaneous real time text communication over the internet. Unlike chat rooms where users can speak to strangers in a shared space, instant messaging takes place between people who possess each other's contact details. There is a risk that children and young people may compromise themselves by sending images and/or inappropriate information. Once these have been shared the child young person has no further control over them. Unlike some chat rooms instant/direct messaging is not moderated.

Instant/direct messaging photo/video sharing applications can be used to share photos and videos online. Children and young people may not realise that if a screen shot is taken of the message or picture sent, it may be retained and distributed by the recipient in a way that the young person had not intended. Images and messages broadcast in this way are beyond the owner's control once a screen shot has been taken.

Chat rooms

The ability to converse with multiple people in the same conversation differentiates chat rooms from instant messaging, which are more typically used for one-to-one communication. Chat rooms may be set up to connect people with shared interests and sometimes have rules that users are expected to follow particularly in rooms designed for children.

Some chat rooms are moderated either by limiting who is allowed to "speak", by having comments approved by moderators (often presented as asking questions of a guest or celebrity), or by having moderation volunteers patrol the venue watching for undesirable behaviour. There is a risk that children and young people may form "friendships" with adults posing as peers with similar interests or other undesirable persons. 

Social networking

Social networking sites allow users to build up networks of friends and mutual friends. They can be used to keep in touch, express opinions, play games, share information, videos, music and photos. Many of the risks associated with chat rooms are applicable to social networking sites with the addition that they are not moderated. Age restrictions applied by most sites can be easily overridden by most young people and are often not compulsory. There is a risk that children and young people may form "friendships" with adults posing as peers with similar interests or other undesirable persons. There is also the risk that they may be subjected to/observe or hear inappropriate language and conversations. There is also a link with online bullying (see separate paragraph). Providers usually provide an alert button to be used if users feel that a post is inappropriate, or they feel uncomfortable with a particular participant.

Gaming

Online gaming provides young people with the opportunity to play games over the internet and to interact with other gamers within their own friendship group or across the world. This can involve web-based games or games via consoles. Online gaming involves real time where players can interact and speak with each other to complete missions or tasks in pursuit of virtual rewards. As above, there is a risk that children and young people may form "friendships" with adults posing as peers with similar interests or other undesirable persons. There is also the risk that they may be subjected to/observe or hear inappropriate language and conversations. There is also a link with online bullying (see below). Gaming platforms are not usually moderated but there is often the facility to report abusive and inappropriate behaviour.

Online bullying and abuse

Online bullying is bullying through the use of information technology and can include sending threatening or abusive messages, making insulting comments, or making and sharing derogatory or embarrassing videos or sending or publicly posting intimidating or threatening messages. This can be targeted to an individual or group. Once information has been shared it is out of the originators control and the abuse can spread causing more distress to the victim.

Online bullying might be an extension of bullying behaviour that is already happening but can take place 24/7 and follow victims into their home and other places where they might expect to feel safe. Online bullying can take a range of forms including threats, harassment, intimidation, impersonation, exclusion, sexting and manipulation.

The victim may not know who is bullying them online and bullying content can be shared with a large audience very quickly and re-appear frequently.

It may be possible for the young person to collect and retain evidence such as texts and screenshots. It can be empowering for a victim if they have something they can show as evidence of the bullying behaviour they have been exposed to, in the event that they make a disclosure.

Online / Non-Contact Sexual Abuse

Online sexual abuse is where a child or young person is pressured, forced or tricked into any sexual activity online. Non-contact sexual abuse causes as much long-term harm to a child or young person as contact sexual abuse. Children who have been forced, tricked, or persuaded to participate in the abuse for example by performing sexual acts on themselves describe feeling as though the participated in the abuse and did it to themselves. Children can feel as though they are to blame even although their actions were directed by the offender. Offenders often tell children that they will be the ones in trouble or that no one will believe them if they tell anyone. The existence of images can make it hard for children to feel that the abuse has come to an end. Images and videos may be out there forever.

Streaming and Live Streaming

Children and young people are increasing moving from watching standard TV to streaming their content. This means that they are watching videos or listening to music in real time rather than watching a TV broadcast or downloading a file. Streaming is done using the internet either via a website, an app or by plugging a streaming device into a standard smart TV. The risks of children being exposed to inappropriate content are higher with streamed services than with standard television viewing.

Livestreaming is where a person broadcasts a video in real time. There are apps specifically for this purpose, but many social media platforms have this feature. On some apps, several people can livestream together. Livestream can usually continue to be viewed once the live broadcast has ended. The audience can leave comments and 'likes' both during and after the livestream. Children and young people like to livestream for several reasons including taking part in viral trends, to be creative, to learn or share a skill and to stay in contact with friends and family. Livestreams of people playing video games are particularly popular. There are a number of risks whilst livestreaming which must be considered. Children and young people may reveal too much personal information or their location, they can receive negative or nasty responses to their posts, their videos may be recorded or shared without their consent, they may feel pressured to behave in a certain way and they may communicate with people they don't know. Whilst viewing livestreams children and young people may be exposed to adult, inappropriate or upsetting content.

Web cams

Children and young people should be cautioned to ensure that web cams are properly turned off or covered securely when they are not in use. There is a risk that unless this is done it may be possible for someone to hack into the computer and watch the young person without them being aware of this.

Cryptocurrency

Cryptocurrency is a digital payment system that doesn't rely on banks to verify transactions. It's a peer-to-peer system that can enable anyone anywhere to send and receive payments. Cryptocurrency is stored in digital wallets and received its name because it uses encryption to verify transactions.

Cryptocurrency is not controlled or regulated but there is a perception that it's possible to make "quick and easy" money using this system. There is an increased risk to children and young people from hackers, exploitation by criminals as well as financial loss due to a lack of regulation or protection.

Exposure to Extremist or Radicalising Material

The internet is used by some groups to promote extremist ideologies or recruit young people into radical or violent activities. Children may be exposed to this material through social media, forums, or gaming platforms. Ealing's Prevent service can provide advice and support. Staff should be aware of the signs of radicalisation and report concerns in line with the Prevent Duty and local safeguarding procedures. Report Suspected online terrorist material.

How to make a referral to Ealing Prevent | Ealing Prevent | Ealing Council.

Radicalisation - the Prevent duty | Ealing Grid for Learning.

Financial exploitation

Money gained from fraud and theft needs to be kept somewhere. To help move it around, criminals will recruit people to hold and transfer money on their behalf, often receiving a percentage of that money in return. Sometimes known as ‘money mules’, this can seem like a quick and easy way to make some money but remember it is a crime.

Financially Motivated Sexual Extortion (FMSE)

Financially Motivated Sexual Extortion is a form of online blackmail in which offenders coerce children and young people into paying money or meeting other financial demands by threatening to share nude or semi-nude images of them. Where a victim is under 18, FMSE is a form of child sexual abuse. Offenders often target young people through social media, using tactics such as fake profiles, grooming, digitally manipulated imagery, and rapid escalation to threats. Reports from UK and international safeguarding organisations highlight a significant rise in cases, particularly involving boys aged 14-18, though victims of all ages and genders are targeted. The impact on children and young people can be severe, including financial loss, disrupted education, shame, distress, and in some cases mental health crises. Our setting is committed to recognising the signs of FMSE, responding promptly and sensitively to any disclosure, supporting affected children and their families, and ensuring they are signposted to appropriate reporting routes and specialist support services. FMSE is never the fault of the child or young person, and all staff must actively challenge any victim-blaming attitudes or language.

Risks Associated with AI-Generated Content and Deepfakes

Advances in artificial intelligence mean that children may encounter AI-generated images, videos, or messages-including deepfakes and abusive material. These can be used to bully, blackmail, or exploit children, and may be difficult to distinguish from genuine content. Staff should educate children about the existence and risks of AI-generated content, encourage critical thinking, and report any suspected abuse to the appropriate authorities. The Online Safety Act 2023 includes provisions for tackling AI-generated abuse material.

Artificially generated child sexual abuse images: Understanding and responding to concerns/CSA Centre.

Romance Scams

Romance scammers target their victims by building up a romantic relationship with them online, before trying to steal from them or manipulate them further. This links in with Child Sexual Exploitation.

Phishing

This is when scammers pretend to be a well-known organisation or company, in order to get your personal information or bank details. They might come in the form of messages or emails with suspicious content or links.

Extra Familial Harm/Risks Outside of the Home (ROTH)

Extra Familial Harm/ROTH is an approach to thinking about and responding to risks of harm to young people from outside their home and families. Whilst online safety can be a safeguarding issue for children, contextual safeguarding principles can be useful in this arena. Cases of Child Sexual Exploitation (CSE), Gang Involvement, Child Criminal Exploitation (including County Lines), Radicalisation (Prevent) and grooming for example, often see perpetrators and victims making use of digital technology and social media to communicate.

Professionals should have a good understanding of online safety issues in order to understand how it may be applied in cases they are working on to help to safeguard the child or young person. As with all contextual safeguarding approaches, the strengths of the individual should be built upon during any interventions – in this context this would include considering the potential positives of a young person being online (such as access to helpful educative material, exploration of personal identity, developing independence, having fun and connection to friends).

Any concerns regarding a child or young person's safety should be referred to Ealing Children’s Integrated Response Service (ECIRS) on 020 8825 8000.

Additional Vulnerabilities

Some children are at greater risk of online harm, including those who are looked after, have disabilities or special needs, or have experienced trauma. These children may be more trusting, less able to recognise risks, or more likely to use the internet for social connection. Staff should provide tailored support, ensure that online safety education is accessible, and work closely with carers and families to promote safe online behaviour. 

A resource aimed to support care experienced children and young people to talk with their carers about their online lives can be found here: Digital Passport.

Where a child or young person has been the victim of bullying, abuse or inappropriate behaviour online the worker should identify appropriate support in line with London Safeguarding Children Procedures.

A note should be made on the child's record and the carer informed. The child should be advised not to respond to the abusive contact. Evidence (text messages/e-mails, etc.) should be saved and the Police contacted as appropriate. Police should always be contacted in instances concerning illegal activity, grooming etc. Contact should be made with online providers to have posts/images removed. If the perpetrator of abusive communication is a looked after child, the carer or allocated worker should discuss the consequences with them with a view to education and consider any age-appropriate sanctions if deemed necessary.

Where there has been inappropriate contact between a looked after child and a parent or family member, the child must be given practical support to terminate communications and arrangements should be made to ensure that the contact does not resume. Contact must be made with the parent or family member responsible who should be advised of the consequences of repeating the unauthorised contact.

Where a looked after child has viewed what is considered an age-inappropriate website the carer or allocated worker should discuss this with them with the aim of providing guidance, education and age-appropriate support. Checks should be made to ensure that filtering and security settings are age appropriate.

If a looked after child has used the internet inappropriately the consequences should be discussed with them by the carer or allocated worker with the aim of educating them of the risks and dangers involved. Activity that might be illegal should be discussed with the Head of Service.

The following advice may be helpful for employees when considering what information to give children and young people:

• Ask permission before using the internet;
• Tell your carer or a trusted adult if you see anything that makes you feel uncomfortable;
• Immediately close any webpage you feel uncomfortable with and report to a trusted adult or use the online CEOP button;
• Do not give out any personal information such as name, address, telephone number, age, school, bank details;
• Do not give out any passwords and use strong passwords (i.e. not something that another person could easily guess);
• Ensure you set the correct privacy settings on social networking websites so that not everyone can see your details, pages and photos;
• Only contact people you have actually met offline;
• Only accept friend requests from people you have actually met off line;
• Never arrange to meet someone you have only met on the internet;
• Only use a webcam with people you have met off line and know;
• Think very carefully about any pictures and comments you post online as these may be forwarded on without your knowledge or permission and become out of your control;
• Never be abusive or unkind to anyone on the internet;
• Only open e-mails from people/organisations you recognise;
• Avoid using website that you are not happy to tell anyone about;
• Use a child friendly search engine.

Internet Usage (including computers, laptops and mobile devices)

Whilst at work or using Council equipment employees must not visit internet sites, make, post, download, upload or pass on material remarks, proposals or comments that contain or relate to:

• Indecent images of children or young people;
• Promoting discrimination of any kind;
• Promoting racial or religious hatred;
• Promoting illegal acts;
• Violence and bomb making;
• Illegal taking or promotion of drugs;
• Adult pornography;
• Other information that may be offensive to others.

Illegal activity will be reported to the Police. Employees should refer to:

• Employee code of conduct | Ealing Council;
• Information security;
• Social workers should also refer to Social Work England's Professional Standards Guidance.

Employees need to be aware of professional boundaries and expectations in relation to the internet and electronic technology usage. Employees should not take photos or videos of children and young people using their personal equipment. Employees should use a Council owned and approved device for permitted photography. Employees must ensure that photos and videos are stored appropriately, and that once photos or videos have been uploaded or printed as required, they should be deleted from the original device. Employees must ensure that any images temporarily taken home (i.e. if on a trip or visit and the worker cannot return equipment to the office until the next working day) images must be stored securely and in line with data security expectations. Workers should refer to separate guidance for homeworking.

Employees must consider and review the way they use social networking. Security settings should be used to control access to profiles. Employees need to be aware that once published, information including photographs and posts, may be manipulated without consent, used in a different context or distributed in an uncontrolled way.

It is not appropriate for employees to have clients as friends on their social networking site. It is also important for employees to avoid detailed discussion about work on social networking sites to avoid any unintentional lapse in confidentiality. Employees should not upload any work-related images (for example photos/videos taken on trips) or "tag" their location. Employees should only use Council provided equipment to make electronic contact with children and young people. In addition, employees should ensure that all electronic contact with clients is noted in MOSAIC.

If in doubt employees should contact their Manager for advice and/or refer to the Employee code of conduct | Ealing Council.

Foster Carers should exercise caution when using social networking sites not to inadvertently reveal details of children they are looking after. Detailed guidance for carers can be found in the Foster Carers Handbook.

It is the responsibility of all employees and foster carers to report any abuse and misuse of the internet by colleagues to their line manager in the first instance. Employees should refer to the councils Whistleblowing policy.

Employees should also notify the Local Authority Designated Officer (LADO) for Allegations Against Staff and Volunteers within 1 working day, and ensure compliance with the London Safeguarding Children Procedures.

Where there has been inappropriate or illegal use of the internet by an employee:

• Employees may be subject to the Council's disciplinary process. Accessing certain sites may be considered gross misconduct and may lead to dismissal without notice;
• Serious breaches and illegal activity will be reported to the Police. The relevant Head of Service and/or LADO must be contacted before this is progressed. A decision will be made as to whether to refer the incident to the audit and investigation team.

If concerns are raised about an employee or representative of another agency these should be reported immediately to the Head of Service and/or LADO.

Where an employee is suspected of accessing illegal or inappropriate sites or has been accused of inappropriate conduct via electronic media the employee Code of Conduct and Council disciplinary procedures apply. An immediate referral should be made to the Head of Service who will contact the LADO and HR to instigate an investigation under the Councils agreed procedures. An early decision needs to be made as to whether the incident should be reported to the Police and/or the Council's Internal Audit and Investigation Team and the Allegations against Staff and Volunteers (ASV) process should be instigated as appropriate. See: CP7. Allegations Against Staff or Volunteers (People in Positions of Trust), who Work with Children.

Depending on the circumstances, and if the Allegations against Staff and Volunteers procedure has been implemented, a decision may be made to suspend an employee while the investigation is on-going. HR will provide support and advice during the implementation of the relevant protocols. Actions might include escorting the employee to his/her workstation to retrieve personal effects only. Employees may be instructed to hand over all keys and access cards and all Council equipment including mobile phones, computer tablets, cameras etc. Arrangements should be made to have the employees access to Council systems suspended pending the result of the investigation. It may be considered appropriate to advise the employee not to contact any members of staff or clients directly.

Help if you're worried about 'sextortion' or online blackmail

Sextortion - UK Safer Internet Centre

Safety features on Social Networks

How AI is being abused to create child sexual abuse material (CSAM) online (Internet Watch Foundation)

Sharing nudes and semi-nudes: advice for education settings working with children and young people

Ofsted Review of Sexual Abuse in Schools and Colleges (including Online) This report is useful reading for everyone working in schools or with children and young people

The Risk of Online Sexual Abuse (ROSA) Project

Useful Websites

UK Safer Internet website

CEOP Education

Childnet Advice on Sexting

NSPCC Report Remove Tool - The tool enables young people under the age of 18 to report a nude image or video of themselves which has appeared online. The Internet Watch Foundation will review these reports and work to remove any content which breaks the law.

UK Council for Internet Safety (UKCIS) Digital Passport - a communication tool to support children and young people with care experience to talk with their carers about their online lives.

Social Media as a Catalyst and Trigger for Youth Violence (Catch 22)

The Dark Web Explained (for Professionals)

Internet Matters - advice for professionals, parents and young people on a wide range of digital safety issues including the digital passport.

Refuge and Risk: Life Online for Vulnerable Young People - research into the risks and dangers for vulnerable young people online. The report discusses the types of risk they encounter which is exacerbated by the vulnerabilities.

Information for Children/Carers

Child Safety Online - A Practical Guide for Parents and Carers whose Children and Using Social Media.

Talking to Your Child About Online Sexual Harassment (Children's Commissioner)

The Dark Web Explained (for Parents and Carers)

Online Safety SEND Resources

UK Safer Internet Centre - Resources for helping children and young people stay safe online, including details of the Professionals Online Safety Helpline.