Platform responsibility is the idea that a service provider should take active steps to reduce foreseeable online harm, rather than treating safety as the user’s problem. In cyber security and trust-and-safety work, this means building controls into the service itself: age checks, abuse detection, safer defaults, reporting tools, and limits on risky features. The goal is to make harmful activity harder before it reaches the user.
This matters because many attacks and abuses succeed by exploiting product design, not just technical flaws. Weak moderation, open discovery, or poor verification can enable phishing, grooming, fraud, malware distribution, and harmful contact at scale. Defensively, platform responsibility pushes teams to assess abuse cases during development, monitor risk, and adjust architecture when a service can be predictably misused. It is both a security and governance concept: if harm is foreseeable, the platform is expected to help prevent it.