Ofcom opens formal TikTok probe into age checks and child-safety failures

Britain's media regulator Ofcom has opened a formal investigation into TikTok, examining whether the short-video platform is doing enough to verify users' ages and to shield children from posts about self-harm and suicide. The probe, confirmed by Ofcom on 16 July 2026, follows a review the regulator published in May that concluded TikTok was not "safe enough" for under-18s and that its age-assurance mechanisms had failed to keep pace with the platform's scale.

The action lands at a moment when platform governance in Britain has acquired teeth. The Online Safety Act, which began to bind in earnest during 2024-25, hands Ofcom the power to levy fines of up to £18 million or 10% of global turnover for serious breaches, and to pursue criminal liability against senior managers who fail to take reasonable steps to mitigate harm. TikTok, owned by ByteDance of Beijing, is now the largest social platform to face a formal Ofcom child-safety probe since the regime took effect, and the regulator's willingness to move early signals a less forgiving posture than the one British policy makers telegraphed during the Act's passage.

What the regulator says it is testing

Ofcom's investigation will focus on TikTok's age-verification architecture, a system the regulator has long viewed as the first line of defence against harmful content reaching minors. According to the BBC, Ofcom wants to know whether TikTok's existing tools reliably prevent users it has identified as children from seeing posts tagged with suicide, self-harm and eating-disorder themes, and whether age-assurance measures are strong enough to keep under-13s off the platform in the first place.

The May review had already accused TikTok of leaving "significant gaps" in its safeguards. In the two months since, the company has rolled out a refreshed version of its family-pairing feature and tightened restrictions on accounts belonging to under-16s, but Ofcom evidently wants more than product tweaks. A formal investigation under the Online Safety Act permits the regulator to compel evidence, interview staff and, if it concludes the platform has breached its duty of care, to issue enforceable directions rather than mere recommendations.

The industry's counter-narrative

TikTok has spent the past year arguing that age assurance is, in practical terms, an unsolved problem for any platform that allows anonymous browsing. The company points out that no commercially available age-estimation tool offers certainty: a 17-year-old who looks older than their age on camera can defeat face-based checks; a child with a parent's ID can defeat document-based checks. The wider tech industry has made a similar argument, and several UK start-ups have begun marketing biometric and behavioural-estimation systems that they claim reduce error rates.

None of that, however, dispatches Ofcom's complaint. The regulator's case is not that perfect verification is possible, but that TikTok has not even deployed the imperfect tools at scale. A plausible counter-reading is that Ofcom is moving against a single firm in part because it is the most visible target, and that the same investigation, applied with equal rigour to Meta's Instagram or Snap, would surface comparable problems. That is a fair point, but it does not relieve TikTok of its statutory obligations.

What the structural picture looks like

Britain is not acting in isolation. Across the European Union, the Digital Services Act has pushed the same compliance burden onto major platforms, with formal proceedings under way against several of them. The United States has taken a more litigation-led route, with state attorneys general pursuing individual cases, while Australia has built a parallel age-assurance regime. What is striking is the convergence: regulators in very different legal traditions are converging on the same conclusion, that self-certification by platforms is no longer acceptable.

For ByteDance, the timing is awkward. TikTok's user base in the United States remains in legal limbo under the Protecting Americans from Foreign Adversary Applications Act, and the European Commission has opened parallel proceedings around content moderation and addictive design. The British probe is not, on its face, an action against Chinese ownership of the platform, and Ofcom has framed it strictly in terms of child safety. But ByteDance now finds itself fending off multiple Western regulators simultaneously, and the cumulative cost of compliance, in legal fees, engineering work and product redesigns, is climbing.

What to watch next

Ofcom has not put a public deadline on the investigation, but precedent from earlier Online Safety Act cases suggests a formal determination within six to twelve months. The first consequential milestones will be Ofcom's interim statements, which typically flag concerns before the process closes, and any request from the regulator to interview named TikTok executives. If Ofcom concludes that TikTok has breached its duty of care, the company will have the right to make representations before any penalty is set, but the direction itself would be enforceable.

The bigger question is whether Ofcom's action changes anything a parent of a British teenager will actually notice. Age-assurance regimes work only if the platforms deploying them are willing to lose engagement, and engagement is the metric on which TikTok's entire business model is built. A fine, even a record one, is a cost of doing business; product changes that keep children off the app are a strategic concession. The investigation will test whether Britain's regulator has the appetite to demand the second as well as the first.

Desk note

Monexus led on Ofcom's own characterisation of the probe, treated TikTok's industry-standard objection that age assurance is technologically unsolved as a legitimate counter-argument rather than dismiss it, and located the action inside a wider Western regulatory turn without naming specific policy frameworks. The piece stops short of framing the action as a Chinese-ownership story; the regulatory trigger is harm to minors, and the evidence in the source items supports that frame.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/wfwitness/
• https://en.wikipedia.org/wiki/Online_Safety_Act_2023
• https://en.wikipedia.org/wiki/Ofcom
• https://en.wikipedia.org/wiki/TikTok
• https://en.wikipedia.org/wiki/ByteDance