A comprehensive investigation by the European Commission has revealed significant deficiencies in TikTok's approach to child safety, raising fresh questions about whether social media platforms are doing enough to shield young users from online harm. In findings announced on July 24, the Brussels-based regulator identified multiple design features that expose minors to unnecessary risks, including cyberbullying, predatory contact, and algorithmic amplification of their content to unknown audiences. The discovery marks an escalation in regulatory scrutiny of the Chinese-owned platform and could ultimately lead to substantial penalties if the company fails to demonstrate compliance with Europe's landmark Digital Services Act.
At the heart of the commission's concerns lies TikTok's default settings, which allow children to maintain publicly visible profiles accessible to users without accounts. This architectural choice, while perhaps intended to maximise the platform's viral reach, creates pathways for potential predators and cyberbullies to identify and target minors based on their posted content. The commission explicitly warned that such exposure heightens the danger of unsolicited contact from bad actors and enables the weaponisation of children's own creative output against them through coordinated harassment campaigns. The regulatory body characterised these settings as fundamentally misaligned with the protective standards mandated by EU law.
A secondary source of concern stems from TikTok's recommendation algorithm, which actively promotes videos created by teenagers aged 16 and 17 to other users across the platform. Unlike some competitors, TikTok's system does not appear to restrict the visibility of teen-created content to age-appropriate audiences; instead, it treats such videos as potentially valuable engagement drivers worthy of platform-wide promotion. The commission argues this approach prioritises engagement metrics over child welfare, particularly given that algorithmic amplification can expose young creators to larger audiences than they anticipated when uploading their content. Additionally, the regulator flagged that private accounts on TikTok remain easily discoverable through search and recommendation functions, suggesting that privacy settings offer less protection than the labelling might imply.
These findings directly contradict TikTok's own characterisation of its safety infrastructure. A company spokeswoman countered the allegations by noting that teen accounts come equipped with more than 50 pre-configured privacy and security features from the moment of creation. TikTok also highlighted that younger teenagers cannot access direct messaging functionality on the platform, a restriction that many competitors do not impose. The platform suggested that these built-in protections represent a robust foundation, though the commission's investigation suggests they may be insufficient or that users lack sufficient guidance to activate and maintain stronger privacy settings throughout their time on the platform.
The commission has formally invited TikTok to submit a written response to the detailed allegations, allowing the company an opportunity to contest the findings or propose remedial measures. However, regulatory authorities have made clear that substantive changes to platform design are expected regardless of the company's response. ByteDance, TikTok's Chinese parent company, faces potential financial consequences that could prove punitive; under the Digital Services Act, the EU can levy fines representing up to six per cent of the company's global annual turnover if violations are proven. For a technology giant of ByteDance's scale, such a penalty would translate to hundreds of millions of euros.
The commission's intervention reflects growing frustration with what European regulators perceive as a pattern of inadequate child protection measures across major social media platforms. Vice President Henna Virkkunen emphasised that minors deserve safe online experiences as a non-negotiable baseline rather than an optional feature requiring user activation. She stressed that the Digital Services Act places responsibility squarely on platforms to embed protections into their fundamental design philosophy, holding them accountable when inadequate safeguarding results in harm. This statement signals that the EU intends to enforce the legislation rigorously and expects platforms to demonstrate proactive compliance rather than reactive compliance measures.
These latest allegations build on earlier concerns raised by the commission in February regarding TikTok's potential to foster addictive behaviour through its interface design. That investigation examined whether certain features—including infinite scroll, autoplay video recommendations, and notification systems—were engineered to maximise time spent on the platform at the expense of user wellbeing, particularly for vulnerable young audiences. Combined with the current child safety allegations, the cumulative regulatory pressure suggests the EU is preparing a comprehensive challenge to TikTok's entire operating model in the European market.
The timing of the commission's findings coincides with renewed political momentum for age-based restrictions on social media use across the EU. France moved ahead with landmark legislation on July 21, becoming the first member state to impose a legal ban on social media access for children under 15, approved by parliament with overwhelming support. European Commission President Ursula von der Leyen has previously advocated for similar age restrictions at the EU level, reflecting changing political attitudes toward permitting minors unrestricted access to platforms designed primarily for adult engagement. Several other member states are developing their own regulatory proposals, suggesting a potential harmonised approach across the bloc.
For Malaysia and Southeast Asia, the EU's regulatory action carries important implications for how platforms operate regionally. International technology companies typically develop unified platform architectures deployed globally rather than maintaining separate versions for different regulatory jurisdictions. If TikTok is forced to implement more restrictive default settings for minors in Europe, the company will face pressure to apply similar protections in Asian markets to maintain operational consistency and avoid the administrative burden of managing multiple policy regimes. However, the extent to which such changes materialise in Southeast Asia depends partly on whether regional governments demand equivalent protections or remain content with current voluntary safety measures.
The investigation also highlights the broader tension between platform growth objectives and child welfare protection. TikTok's design—with its publicly visible teen accounts and algorithm-driven discovery—maximises the quantity of content reaching users and the platform's overall user engagement metrics. Restricting access or limiting algorithmic promotion of teen content would necessarily reduce these metrics, creating incentives for the company to resist or minimally comply with regulatory demands. The commission appears to recognise this structural conflict, explaining why it has embedded enforcement mechanisms directly into the Digital Services Act rather than relying on voluntary platform commitments.
Looking forward, TikTok's response to these allegations will shape the regulatory relationship between the platform and the EU for years to come. The company can attempt to negotiate technical solutions that preserve its algorithmic advantages while implementing additional safeguards, or it can contest the commission's legal interpretation and accept the risk of proceeding to formal enforcement proceedings. Given the size of the potential fine and the political salience of child safety issues across Europe, the platform faces strong incentives to demonstrate tangible compliance. Nevertheless, the underlying question—whether social media platforms can be simultaneously profitable, engaging, and genuinely safe for minors—remains unresolved.
