Is an acceptable use policy legally binding?

Yes, if it is properly incorporated into the terms of use for the service. The AUP should be referenced in (or form part of) the website's terms and conditions, and users should be required to accept the terms before using the service. This creates a contractual obligation to comply with the policy.

Can I terminate a user's account for violating the AUP?

Yes, provided the AUP and terms of service clearly state that you reserve the right to do so. It is good practice to have a graduated enforcement process — such as warning, suspension, and then termination — to demonstrate proportionality. However, for serious violations (such as illegal activity), immediate termination is appropriate.

Am I liable for content posted by users on my platform?

Under Regulation 19 of the Electronic Commerce (EC Directive) Regulations 2002, hosting providers are not liable for information stored on their servers, provided they do not have actual knowledge that the activity is unlawful, and upon obtaining such knowledge, they act expeditiously to remove or disable access to the content. Having a clear AUP and reporting mechanism helps demonstrate compliance.

Do I need to monitor all user activity?

No. There is no general obligation on service providers to monitor user activity or to actively seek out unlawful content. However, you should have procedures in place to respond promptly to reports of violations. Failing to act upon reports could undermine your hosting defence under the Electronic Commerce Regulations.

Should I report criminal activity to the police?

If you become aware of activity that may constitute a criminal offence — such as child exploitation material, threats of violence, or fraud — you should report it to the appropriate authorities. For most criminal activity, report to the police (101 or 999 for emergencies), Action Fraud (0300 123 2040), or the National Crime Agency. For child exploitation, report to the Internet Watch Foundation (IWF).

How often should I update the acceptable use policy?

Review and update your AUP at least annually, or whenever there are significant changes to your service, your business practices, or the law. Emerging issues such as AI-generated content, deepfakes, and cryptocurrency-related activities may require new provisions. Always notify users of material changes.

Free Acceptable Use Policy Template

An acceptable use policy (AUP) is a document that sets out the rules and standards of behaviour that users must follow when using a website, online service, or IT system.

FreePDF & Word

Your data stays on your device — nothing is sent to any server.

Company Details

Company / Organisation Name*

Website URL*

Contact Email for Reporting Violations*

service

Description of the Service*

Briefly describe the website or service this policy applies to.

rules

Prohibited Activities (additional to standard list)

Add any service-specific prohibited activities. Standard prohibitions (illegal activity, harassment, malware, etc.) are already included.

Enforcement Measures*

policy

Date of Policy*

Document Preview

ACCEPTABLE USE POLICY [companyName] [websiteUrl] Last updated: [lastUpdated] 1. INTRODUCTION This acceptable use policy ("Policy") sets out the rules governing the use of [websiteUrl] ("the Service") operated by [companyName] ("we", "us", "our"). [serviceDescription] By using the Service, you agree to comply with this Policy. If you do not agree, you must not use the Service. 2. PROHIBITED ACTIVITIES You must not use the Service: (a) for any purpose that is unlawful or that promotes any illegal activity; (b) to send, upload, or distribute any content that is defamatory, obscene, offensive, hateful, inflammatory, or discriminatory; (c) to harass, bully, intimidate, or threaten any person; (d) to infringe the intellectual property rights, privacy rights, or other rights of any third party; (e) to transmit any viruses, trojans, worms, or other malicious software; (f) to gain or attempt to gain unauthorised access to any part of the Service, other user accounts, or any computer systems or networks connected to the Service; (g) to interfere with or disrupt the operation of the Service or the servers or networks that host it; (h) to impersonate any person or entity, or to misrepresent your identity or affiliation; (i) to collect or harvest personal data from other users without their consent; (j) to use the Service for any commercial purpose not expressly permitted by us; (k) to send unsolicited communications (spam) through the Service. 3. USER-GENERATED CONTENT 3.1 If the Service allows you to post, upload, or share content, you are solely responsible for that content. You must ensure that any content you submit complies with this Policy and all applicable laws. 3.2 We reserve the right to remove or disable access to any content that violates this Policy, without prior notice. 3.3 We do not monitor user-generated content in real time, but we will investigate and act upon reports of violations. 4. REPORTING VIOLATIONS If you become aware of any use of the Service that violates this Policy, please report it to us at: [contactEmail] We take all reports seriously and will investigate promptly. 5. ENFORCEMENT If we determine that you have violated this Policy, we may take one or more of the following actions at our sole discretion: [enforcementMeasures] We may also report suspected criminal activity to the relevant law enforcement authorities, including the police, the National Crime Agency (NCA), and Action Fraud. 6. LEGAL FRAMEWORK Users should be aware that certain activities prohibited by this Policy may also constitute criminal offences under UK law, including: (a) the Computer Misuse Act 1990 (unauthorised access to computer systems); (b) the Communications Act 2003, Section 127 (sending grossly offensive or menacing communications); (c) the Malicious Communications Act 1988 (sending threatening communications); (d) the Fraud Act 2006 (fraud and dishonesty offences); (e) the Copyright, Designs and Patents Act 1988 (intellectual property infringement). 7. CHANGES TO THIS POLICY We may update this Policy from time to time. Changes will be posted on this page with an updated revision date. ___________________________ [companyName] Last updated: [lastUpdated]

Important Notes

Legal Disclaimer

This acceptable use policy references several key pieces of UK legislation. The Computer Misuse Act 1990 creates offences of unauthorised access to computer material (Section 1), unauthorised access with intent to commit further offences (Section 2), and unauthorised acts with intent to impair computer operation (Section 3). The Communications Act 2003, Section 127, makes it an offence to send a grossly offensive or menacing message over a public electronic communications network. The Malicious Communications Act 1988, Section 1, makes it an offence to send communications conveying a threatening message or information that is grossly offensive. The Fraud Act 2006 creates offences of fraud by false representation (Section 2), fraud by failing to disclose information (Section 3), and fraud by abuse of position (Section 4). Service providers may benefit from the hosting defence under Regulation 19 of the Electronic Commerce (EC Directive) Regulations 2002, provided they act expeditiously to remove or disable access to unlawful content upon becoming aware of it.

This template is provided for informational purposes only and does not constitute legal advice. For complex legal matters, we recommend consulting a qualified solicitor.

Frequently Asked Questions

Related Templates

Terms and Conditions (Website)Privacy Policy (UK GDPR)Cookie Policy Data Processing Agreement (DPA)