Ofcom Finds TikTok and YouTube Still Not Safe Enough for Children

Britain's media regulator has declared that TikTok and YouTube are still failing to adequately protect children from harmful content, issuing a formal warning that both platforms must do significantly more to comply with the Online Safety Act or face substantial financial penalties. Ofcom's findings, published following a months-long assessment of algorithmic recommendation systems and age verification mechanisms, represent the most detailed regulatory scrutiny either platform has faced in the United Kingdom to date.

Ofcom's Core Findings

The regulator's report concludes that algorithmic systems on both TikTok and YouTube continue to recommend age-inappropriate content to underage users, including material depicting self-harm, eating disorders, extreme violence, and highly sexualised content, even when users have identified themselves as minors. Ofcom said its researchers found that children were being served such material within minutes of creating accounts, despite existing safety filters nominally being in place.

According to Ofcom's published assessment, TikTok's default settings for users aged thirteen to seventeen still permit exposure to a range of potentially harmful content categories, and the platform's algorithmic amplification continues to prioritise engagement metrics in ways that conflict with child safety obligations under UK law. YouTube, meanwhile, was found to have implemented uneven protections across its standard and Kids platforms, leaving significant gaps for younger users who access the main application. (Source: Ofcom)

Age Verification Under Scrutiny

A central thread running through Ofcom's findings is the persistent weakness of age verification systems. The regulator determined that both platforms rely too heavily on self-declaration — users simply entering a date of birth — rather than technically robust verification methods. Ofcom's assessment noted that children as young as eight and nine were routinely accessing unrestricted content by entering false ages, a problem the regulator described as structural rather than incidental.

Ofcom said it expects platforms to move toward age assurance technologies that provide a higher degree of confidence in user age, a standard that may require integrations with third-party verification providers. The regulator stopped short of mandating a specific technical solution but made clear that self-declaration alone would not satisfy compliance requirements under the Online Safety Act going forward. (Source: Ofcom, BBC News)

Algorithmic Amplification of Harm

Researchers working on Ofcom's behalf used test accounts mimicking the behaviour of children aged between thirteen and fifteen to probe how recommendation engines responded to early viewing patterns. The findings indicate that on TikTok, accounts that interacted with content related to body image were served increasingly extreme material within hours, with the algorithm accelerating toward content that met the legal threshold for harmful content under UK definitions.

YouTube's recommendation system was found to exhibit similar patterns, particularly around content involving risk-taking behaviour and violent imagery, with the platform's safety classifiers failing to intercept a notable proportion of flagged material before it was served to child accounts. (Source: Ofcom, Reuters)

Platform Responses and Disputes

Both TikTok and YouTube disputed elements of Ofcom's findings, arguing that the regulator's methodology did not fully account for safety improvements already rolled out or currently in development. TikTok issued a statement saying it had invested substantially in safety technology and that the findings did not reflect the current state of its platform, while YouTube said it had implemented multiple layers of protection and would engage constructively with Ofcom's formal recommendations.

Industry observers noted that platform pushback against regulatory findings has become a consistent pattern across European and UK regulatory proceedings, with companies typically acknowledging some concerns while contesting the breadth and severity of conclusions. Neither company indicated it would challenge Ofcom's authority to impose requirements, though both signalled they would seek to negotiate the scope and timeline of mandated changes. (Source: AP, The Guardian)

History of Regulatory Friction

This is not the first time either platform has faced formal action in the UK. TikTok was previously fined £12.7 million by the Information Commissioner's Office for misusing children's data, a penalty the company appealed before eventually settling. YouTube has faced repeated scrutiny from Ofcom's predecessors and from European data protection authorities over its handling of children's personal information and its compliance with the Children's Code. The current proceedings mark a significant escalation in the direct regulatory pressure both companies face in the UK market.

Legal Framework and Enforcement Powers

Ofcom's authority to compel changes stems directly from the Online Safety Act, which places a duty of care on platforms to protect users — particularly children — from harm. The Act establishes a tiered enforcement mechanism, beginning with formal notices requiring remediation, escalating to financial penalties, and ultimately extending to the potential for service restriction orders that could prevent UK users from accessing a non-compliant platform entirely.

Legal analysts said the Act gives Ofcom considerably more practical leverage than previous regulatory frameworks, which tended to rely on voluntary commitments and codes of practice that lacked meaningful enforcement teeth. The regulator has signalled it is prepared to use its full range of powers if platforms fail to demonstrate credible progress within specified timeframes. (Source: The Guardian, Reuters)

Comparison With European Regulatory Action

The UK's regulatory push mirrors parallel action across the European Union, where the Digital Services Act has imposed similar obligations on very large online platforms. The European Commission recently opened formal proceedings against TikTok under the DSA, citing concerns about addictive design features and inadequate protections for minors — findings that broadly align with Ofcom's conclusions. Regulatory coordination between the UK and EU on platform safety, while informal, is increasingly reflected in the convergence of findings and enforcement timelines. (Source: Reuters, AP)

Children's Safety Advocates Respond

Child safety organisations welcomed Ofcom's findings while arguing the regulator must move swiftly from assessment to enforcement. The NSPCC said the report confirmed what campaigners had long argued — that voluntary platform commitments were insufficient and that only binding regulatory action with real consequences would drive meaningful change. The organisation called on Ofcom to issue formal enforcement notices without delay rather than entering extended consultation with the platforms.

5Rights Foundation, which has been closely involved in the development of the Children's Code and the Online Safety Act, said the findings underlined the importance of default-safe design, arguing that platforms should be required to configure their systems for the most protective settings by default rather than placing the burden on parents and children to navigate complex privacy controls. (Source: BBC News, The Guardian)

Parental and Public Concern

Polling data cited in Ofcom's report indicates that a substantial majority of UK parents express concern about the content their children encounter on video-sharing platforms, with a significant proportion saying they do not feel adequately equipped to monitor or control their children's online experiences. The regulator said public concern of this scale underscored the need for systemic platform-level intervention rather than solutions that rely primarily on parental supervision.

Mental health researchers have separately documented associations between algorithmic content recommendation and deteriorating wellbeing in adolescents, particularly in relation to body image and social comparison content — findings that informed the categories of harm Ofcom prioritised in its assessment. (Source: Ofcom, Reuters)

Political Reaction and Government Position

The findings drew immediate responses from across the political spectrum in Westminster. The Secretary of State for Science, Innovation and Technology said the government stood fully behind Ofcom's regulatory role and expected platforms to comply with UK law without exception, adding that the Online Safety Act had been designed precisely to address systemic failures of this kind. Senior opposition figures echoed the sentiment, with several calling for the enforcement process to be accelerated and for Ofcom to set tighter compliance deadlines.

The government's broader digital policy agenda has faced questions about consistency across different areas of technology regulation, with critics noting tension between economic interests in attracting technology investment and the robust enforcement of consumer and child protection rules. As the UK navigates its post-Brexit regulatory identity, decisions on how firmly to enforce the Online Safety Act are being closely watched both domestically and by international regulatory counterparts. (Source: AP, BBC News)

For further context on the government's current policy priorities and public spending trade-offs, see our coverage of how Chancellor Reeves's £100m free bus scheme bypassed energy bill relief for households, as well as analysis of how supermarkets have resisted government pressure to cap staple food prices amid the ongoing cost-of-living squeeze. The broader question of where the government chooses to apply regulatory pressure — and where it pulls back — is also visible in the UK's decision to finalise a £3.7bn Gulf trade deal despite sustained rights concerns.

Ofcom said it would publish a formal timeline for platform compliance in the coming weeks and indicated it was prepared to issue enforcement notices if platforms failed to provide adequate remediation plans. The regulator described child safety online as one of its highest current priorities and said it would not accept commitments unsupported by technical evidence of real-world impact. Both TikTok and YouTube said they would continue to engage with the regulator, and both insisted they remained committed to the safety of younger users on their platforms — a claim Ofcom's findings suggest remains, for now, significantly short of the standard UK law requires.