Definitely feel like I'm in the minority on mastodon in feeling that, broadly, it's right that small sites with user-user interaction should have to do the kinds of risk assessments the OSA requires and have defined effective moderation / content removal measures etc.
The assessment guidance being awful, and the law having too many ambiguities, are things begging to be fixed... but the principles behind are not wrong to my mind.
A physical cycling club is going to e.g. have done safeguarding assessments, considered health annd safety, written down club rules etc. to protect its members.
I don't think it's unreasonable for risk assessments to be required of even a small online cycling community, or similar. But, it shouldn't be as costly or ambiguous as the fumbled introduction of this law makes it.
@dctrud When I used to run bike rides I had £3M or so indemnity insurance via the CTC (as was) so I do feel like the struggles of smaller sites shows that we have quite stunted civic tech structures cf. IRL ones to help with risk assessment and so on.