The UK's Online Safety Act is either an example of epic incompetence and failure to consult with privacy and security experts, or it's a carefully-crafted piece of legislation designed to create a giant unregulated free-for-all for shady data brokers. Of course it could be a bit of both, but given this government's proven willingness to cave in to every wealthy lobby group going, my money's on the latter.
Don't send sensitive docs and personal info to random fly-by-night companies! Use a VPN.