As well as forcing porn sites to ensure all their users are adults, the Online Safety Act also added a bunch of mostly sensible rules about what you can do when your users are children that go beyond what the GDPR does.