Nostr notes by jaz-michael king's blog

We’re at a bit of a strange moment in the history of the ...

2026-03-13T15:55:49Z

We’re at a bit of a strange moment in the history of the Internet. Long-standing assumptions about platform freedoms and responsibilities are being tested by a wave of regulation from countries far and wide, including extranational jurisdiction where all of a sudden people are finding themselves subject to laws of countries they’ve never been to.

The age of self-regulation is ending. In 2021 there were three OECD safety regulators. Today, a mere five years later, there are 28.

The two-year-old [Global Online Safety Regulators Network](https://www.esafety.gov.au/about-us/consultation-cooperation/international-engagement/the-global-online-safety-regulators-network ) brings together independent regulators to cooperate across jurisdictions, which may lead to [alignment across nations and regulations](https://www.esafety.gov.au/sites/default/files/2025-11/GOSRN-Regulation-Index-2025.pdf?v=1773412565992 ), from Fiji to France.

For social media alone, [three countries have implemented age restrictions](https://social-media-age-tracker.onrender.com/#status=implemented,passed ), five have passed laws ready to implement, and 30 more discussing or under consideration at a national level. For many of us, it’s jarring and unsettling, and this is especially true if you’ve never worked in a regulated industry before.

Internet regulation is generally converging around three main themes:<li>Platform integrity: the macro responsibility for elections and social discourse.</li><li>Individual safety: the proactive duty of care for children and vulnerable people.</li><li>Personal agency: mandating data portability and banning manipulative dark patterns.</li>

These new burdens feel sudden and invasive if you’ve spent your career inside the Web’s long-running freedom experiment. For me, however, they follow a pattern I’ve seen before. I think there are some lessons we can learn from – and be better prepared – by looking beyond digital media.##

The Myth of ExceptionalismI started working on the Web in the mid-nineties. It was liberal in the most literal sense, few gatekeepers, no meaningful regulation, and a shared belief that this new thing would disintermediate everything. Media, power, and information were all up for grabs.

“Under construction” signs abounded. Dancing dog gifs ran across Web pages. The Clinton White House [specifically told everyone to go nuts](https://clintonwhitehouse4.archives.gov/WH/New/Commerce/read.html ), that no amount of regulation could possibly keep up with how fast the Net was innovating. Phrases like “The private sector should lead” and “Governments should avoid undue restrictions” stimulated a self-regulating industry that is now bristling at unwanted government interference.

We built first and worried later. The default assumption was freedom; responsibility was personal rather than systemic. We created a mythos that the Internet was exceptional, as if it were somehow immune to the rules of the offline world.

Then, in 2001, almost by accident, I moved into healthcare.##

When Regulation Provokes OutrageHealthcare is one of the most heavily regulated environments on the planet, and for good reason – lives are at stake. My transition into this world coincided with a wave of mandates designed to break open the black box of medical outcomes. From 1995 to 2000, a range of reforms hit healthcare, built on the back of seminal writings like “[To Err is Human](https://pubmed.ncbi.nlm.nih.gov/25077248/ )” and “[Crossing the Quality Chasm](https://pubmed.ncbi.nlm.nih.gov/25057539/ )“, leading to the creation of state and national report cards on nursing homes, hospitals, physicians and more.

I became one of the people responsible for turning those legal requirements into reality. I was building the databases and public dashboards that the laws now required to make healthcare quality and cost visible to the public. I built, provided data for, consulted or advised on just about every initiative in the US in that decade. I designed and deployed [a national data infrastructure](https://pellucid.atlassian.net/wiki/spaces/PEL/overview?homepageId=8028166 ) for codifying performance, cost and quality data over time. I made a [lot](https://healthcarereportcard.illinois.gov/search ) [of](https://whynotthebest.org/ ) [report](https://profiles.health.ny.gov/nursing_home/index#5.79/42.868/-76.809 ) cards. This made quite a few people very angry.

Clinicians and administrators confronted me directly. They claimed the data was unfair or lacked context. What struck me was that the anger was rarely about the underlying disparities in care. Instead, it was about the act of publication itself, which was now compelled by law. Being made transparent and accountable to the public felt like an attack on their professional identity.

I see that same identity shock today from technologists as they realise their closed systems and unfettered independence are being opened and constrained by similar regulatory tools.##

From Hero Culture to ComplianceAs healthcare matured, we moved from transparency to interoperability. This arrived with [HIPAA](https://www.hhs.gov/hipaa/index.html ) in the US. At the time, it was loathed. Technologists complained it was vague, hard to implement, and poorly aligned with how software worked.

Most people assume the P in HIPAA stands for privacy; it actually stands for portability. Regulation did not stop data sharing. It professionalised it, it shifted the focus from institutional protection to patient-centredness.

We saw the same arc in cybersecurity, as privacy and security became more entwined. It began as a bit of a dark art, which was the era of the hero admin. But as harms and threats accumulated, an industry formed, best practices became auditable compliance. [SOC 2](https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2 ), [ISO 27001](https://www.iso.org/standard/27001 ), [FISMA](https://www.congress.gov/bill/113th-congress/senate-bill/2521 ) became common parlance. Risk assessments and incident reporting stopped being optional. Cybersecurity and the regulation that requires and enforces it did not kill innovation, it gave us a shared language for risk, and has had demonstrable benefits to society. Data breach disclosure laws, for example, [resulted in a significant drop](https://onlinelibrary.wiley.com/doi/abs/10.1002/pam.20567 ) in identity theft incidents. The ID Theft Center reports a [major decline in breach notifications](https://www.idtheftcenter.org/wp-content/uploads/2026/01/2025-ITRC-Annual-Data-Breach-Report.pdf ), thanks in the main to data privacy regulations (and the fines that come with ignoring them).##

The Internet is Catching UpThe Internet is now at this exact same tipping point. What cybersecurity was to data integrity, modern regulation is to platform safety and rights. The idea of a permanently unregulated Internet is simply not credible anymore.

This is not because regulators hate our freedoms. It’s because the Internet is a fundamental and vital utility that now shapes childhood, mental health, and physical safety. When systems reach that level of impact, they get regulated. Period. Whether it’s [Australia’s social media ban for minors](https://www.unicef.org.au/unicef-youth/staying-safe-online/social-media-ban-explainer ), the [EU’s Digital Safety Act](https://digital-strategy.ec.europa.eu/en/policies/digital-services-act ), or the[ UK’s Online Safety Act](https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer ), it’s not even a case of “censorial Europe” versus a “free” America. [Half of all US states now require age verification](https://www.404media.co/missouri-age-verification-law-porn-id-check-vpns/ ) for adult content. This is political reality catching up everywhere at once.##

Fediverse OperatorsIf you run a small server, perhaps a local community hub or a niche interest instance, this can feel incredibly intimidating. Regulation sounds like something designed for platforms with a thousand lawyers and a big shiny office in California.

However, most of these laws, and the regulators that enforce them, follow a [principle of proportionality](https://www.bihr.org.uk/get-informed/legislation-explainers/what-is-proportionality ). A regulator’s actions must be lawful, legitimate, and proportional. Lawful means there must be a law allowing official to take action, legitimate means there is a good reason to act, and proportionate means there is no other way to seek the desired outcome, it is the least restrictive option available to the regulator.

You are not being measured against the same yardstick as a multi-billion-dollar platform. The goal is good faith, not perfection. For small services, compliance usually looks like a few clear signals:<li>Be reachable: have a clear way for authorities and users to contact you on your About page.</li><li>Be clear: document your policies and how someone can appeal a decision.</li><li>Be informed: use the resources the community is already building.</li>

If a regulator ever comes knocking, they won’t ask why you missed one bad post. They’ll ask “Do you have a process for when things go wrong?” Make sure you have one. And as a start, copy someone else’s. Find a service you like and look at their documentation. Beg, borrow, or steal liberally. [Here’s everything I have on toot.wales](https://croeso.toot.wales/en/policies/ ) for example, help yourself.

The early Web was a gift, but freedom without accountability does not scale. There is one Fediverse, there are a million Fediverses, and there are a thousand regulations each of them has to be ever so gently aware of. Learning to live with a regulated Internet is not a failure of imagination. It’s the next phase of our shared responsibility.##

Further Reading<li><a href="https://www.google.com/search?q=https://about.iftas.org/dsa/"; target="_blank" rel="noreferrer noopener">IFTAS DSA Guide</a> – Guidance specifically for small providers. It breaks the Act down into manageable, actionable steps for Fediverse admins.</li><li><a href="https://decoded.legal/blog/"; target="_blank" rel="noreferrer noopener">Decoded Legal</a> – This is a brilliant resource for understanding how English law views decentralised services. Their analysis of the UK Online Safety Act is essential reading for anyone running a UK-based instance (and can be insightful for others too).</li><li><a href="https://fediverse-governance.github.io/images/quick-start.pdf"; target="_blank" rel="noreferrer noopener">The Fediverse Governance Guide</a> – A community-led effort to document best practices for server moderation, transparency reports, and user appeals.</li><li><a href="https://about.iftas.org/wiki_cats/legal-regulatory/"; target="_blank" rel="noreferrer noopener">The IFTAS Community Library</a> – A growing repository of tools and documentation templates. You can find examples of clear, legally-aware content you can adapt for your own community.</li><li><a href="https://www.google.com/search?q=https://www.eff.org/issues/bloggers/legal/osp"; target="_blank" rel="noreferrer noopener">Electronic Frontier Foundation (EFF) – Legal Guide for Online Service Providers</a> – While US-centric, this provides a great foundational understanding of the protections that shaped the Internet and how they are evolving today.</li>

Recently, I was sitting with my sister-in-law talking about ...

2026-01-13T15:22:37Z

Recently, I was sitting with my sister-in-law talking about social media. She has that nagging, familiar concern about corporate social: the feeling that we are all just products in someone else’s machine. I pulled out my phone, showed her my toot.wales feed, and started explaining how she could “save the web site to her home screen”.

She listened politely, then said the thing I believe most people genuinely feel:

**“It’s lovely! If only there was an app…”**

She does not want a “protocol”. She does not want to hear about “the Fediverse”. She just wants *that *feed on *her* phone without a homework assignment.

When I started toot.wales, I knew this instinctively. In the early days, I even paid a developer to fork a couple of open-source apps and hard-code them to our server. It was expensive and eventually I simply couldn’t sustain it, but I never lost sight of that goal.

Now, working with our brilliant friends at the [Newsmast Foundation](https://www.newsmastfoundation.org/ ), we have finally delivered it: a simple, opinionated, “people-first” social app.###

One community. One door.The biggest design decision we made was the simplest: the app is hard-locked to toot.wales.

There is no “pick a server” screen or “find your instance”. There is no friction. This is not “a Mastodon app”; it is the Tŵt app, purpose-built for our community.

I’ve spent years building tools like *[StartHereSocial](https://jaz.co.uk/projects/startheresocial/ )* to help people navigate the “maze” of the Fediverse. However, for toot.wales, I realised the answer should not be a better map. It should be an inviting, open front door. If you want to join us, you should be able to step right in.###

Croeso: A warmer welcomeAlongside the app, I built a promotional web site at [croeso.toot.wales](https://croeso.toot.wales ). *Croeso* is Welsh for “welcome”, and that is exactly what it provides. It strips away the jargon. There is no talk of federation or decentralisation. Instead, it offers clear language about why this is “Better Social”.

It is joyful and unthreatening on purpose. We are not here to preach at you to quit X or Facebook, and we are not shaming anyone. We are simply inviting you to try something different. If you like the vibe, stay. If not, that is fine too. People stay because it feels good, not because they have been talked into a boycott.###

A Fediverse of communitiesSome people see the Fediverse as one giant global town square. I see it differently. For me, it is a constellation of communities.

When people tell me “mastodon.social is too big”, my gut feeling is no, *your* server is too small. Communities only grow when we intentionally nurture them. It is not up to a company in Germany to grow Tŵt. That’s on us, it’s our problem.

I want everyone in Wales (and the world!) to have a social option that is not drowned in surveillance and ad-tech. To get there, we have to design for clarity rather than complexity.###

What’s inside the Tŵt app?

We have made some very deliberate choices to keep the app “human-shaped”:<li>Private Mentions have their own space. You cannot create a private mention in the main composer and you will not see them in your timeline. We have put them in a dedicated “Conversations” tab to reduce mistakes and keep privacy intentional.</li><li>Three simple tabs. You get Home (your personal feed), Tŵt (the “local” feed plus replies), and Explore (your lists and hashtags, plus curated feeds for news, sport, culture and more). This creates a natural flow from your own interests to the wider community.</li><li>Search is just search. There are no “trending” nudges or unsolicited content. If you are looking for something, we help you find it. We don’t try to distract you along the way. Trending is it’s own Channel.</li><li>True Bilingualism. English and Cymraeg sit side-by-side as equal choices. Digital spaces should reinforce our identity, not flatten it.</li>###

Celebrating the pioneersThe Tŵt ecosystem is already thriving because Welsh media organisations took a leap of faith into the open web. Groups such as Nation.Cymru, Golwg360, Swansea Bay News, and Wrexham.com did not wait to see which way the wind was blowing. They just started building, and are long-time social web citizens.

Whether it is weather updates from North Wales Storms or local sports teams, these partners make the app feel “live” from the moment you log in. The app offers two pathways to consume this content, via Channels you can drop in and out of, or Starter Packs you can follow to bring them into your feed.###

Why this mattersFor those already comfortable with the Fediverse, using a web interface is fine. But for everyone else, “just install the web site” is not meaningful advice.

People want “the app”. They want to tap an icon and feel at home, rather than feeling like they are doing a technical chore.

If you run a community and like our approach, please feel free to use it. Whether it is the onboarding flow, the “Better Social” messaging, or the focus on language equity, you are welcome to use my work as a template. If we want a healthier internet, we need more communities feeling empowered to build their own front doors.

The Tŵt app is our doorway. It is built for Wales and the Welsh, at home and abroad. It is simple, it is ours, and I cannot wait for you to try it. We plan on launching on Dydd Dewi Sant, a special day for Cymru, in the meantime you can get a preview at https://croeso.toot.wales/en/less-clutter-more-cwtch/