Illegal Content Risk Assessment

Colouring Gallery — Johanna Basford Ltd (www.johannabasford.com)

Prepared: 2 July 2026  |   Legal basis: Online Safety Act 2023, s.9

1. Purpose and scope

All regulated user-to-user services must carry out a “suitable and sufficient” illegal content risk assessment, covering the risk that the service is used to commit or facilitate a priority offence, or to host other illegal content, and must keep it up to date.

2. Service characteristics

FeaturePresent?Notes
User registrationYesFull name, username, email address
Public content uploadYesPhotographs of coloured Johanna Basford artwork
Pre-publication moderationYes100% human review before content goes live
Direct messaging between usersNo
Public comments on imagesNo
Search / discovery of other usersYesOnly by username. 
Anonymous postingNoRequires a registered account
LivestreamingNo

3. Risk register

Risk areaLikelihoodImpactExisting mitigationsResidual riskFurther action
Child sexual exploitation & abuse (CSEA) content, including images of children uploaded in a way that could be exploitedLowHigh100% human pre-moderation before publication; registered accounts only (no anonymity)LowGive the moderator a written escalation procedure: report suspected CSEA material to the IWF/NCA and preserve evidence rather than simply deleting it
Harassment, stalking, abusive commentsLowMediumAcceptable Use Policy prohibits abusive content; moderationLowConfirm whether comments/messaging exist; if so, add reporting/blocking tools
Hate offencesLowMediumContent standards prohibit hate speech; moderationLowOngoing moderator training/refreshers
Encouraging or assisting suicide/self-harmLowHighUnlikely subject matter for colouring images; moderation would catch incidental disclosuresLowBrief the moderator on a referral pathway if a user discloses risk of harm via any text field
Fraud / scamsLowLowNo payment or marketplace functionality on the GalleryLowNo further action
Extreme pornography / non-consensual intimate imagesLowHighModeration before publication prevents any such image reaching public viewLowMaintain moderation as the primary control; keep a log of decisions
Intellectual property infringement / impersonationLowLowTerms of Use prohibit infringing contentLowNo further action

4. Overall risk level

Provisionally assessed as LOW, on the basis that 100% of content is reviewed by a human moderator before publication and the service does not support anonymous posting. No messaging, comments or contact between users 

5. Mitigation measures already in place

  • Mandatory account registration (no anonymous uploads)
  • 100% pre-publication human moderation of every image
  • Written content standards (Acceptable Use Policy)
  • User reporting/flagging route ([email protected])
  • Right to remove content and suspend accounts
  • Escalation route to law enforcement / the Internet Watch Foundation for the most serious content

6. Further actions / recommendations

  • Review this assessment annually, or sooner following any functionality change

7. Governance

Owner: Johanna Basford     Next review date: 3/7/27

8. Sign-off

Completed by:Johanna BasfordDate:3/7/26
Approved by:Date: