The European Commission has identified significant deficiencies in TikTok's approach to safeguarding children, marking an escalation in regulatory pressure on the Chinese-owned platform that dominates youth social media usage across Europe. Released on July 24, the commission's findings centre on structural design flaws that expose minors to predatory contact and online harassment, undermining fundamental protections that regulators consider essential for the digital safety of young users.
At the heart of the commission's concerns lies TikTok's default settings, which permit minors to maintain public profiles accessible to non-users. This architectural choice creates vectors for unwanted contact by potential perpetrators and facilitates cyberbullying through unrestricted visibility of children's content. The commission views this arrangement as incompatible with the stringent protections mandated under the Digital Services Act, the EU's landmark framework for platform accountability. The problematic design extends beyond mere visibility: TikTok's algorithm actively promotes videos created by 16- and 17-year-olds to broader audiences, effectively using machine learning to amplify teenage content in ways that heighten exposure risk rather than contain it.
TikTok's technical infrastructure further undermines child safety through features that make private accounts readily discoverable within the platform's ecosystem. Rather than requiring users to opt into child protection mechanisms, the commission contends that privacy safeguards should form the default foundation upon which accounts are constructed. This philosophical divide reflects broader disagreement about platform responsibility: TikTok maintains that users can configure numerous privacy settings independently, but European regulators argue that placing this burden on families contradicts the precautionary approach demanded by the Digital Services Act.
The commission has formally requested a written response from TikTok, initiating a process that could culminate in substantial financial penalties. Should investigators ultimately determine that the platform violates EU law, fines could reach six per cent of the company's global annual turnover, a calculation that would impose considerable cost on ByteDance's worldwide operations. This enforcement mechanism represents the regulatory muscle underlying the Digital Services Act and demonstrates the commission's willingness to deploy it against globally dominant technology companies regardless of their operational headquarters.
For Southeast Asian policymakers and Malaysian regulators, this European enforcement action carries direct relevance. TikTok operates across the region with comparable user demographics and algorithmic systems, yet most Southeast Asian countries lack equivalent regulatory frameworks. The absence of stringent child protection standards in Malaysia and neighbouring jurisdictions creates regulatory arbitrage, where platforms can implement varying safety standards depending on territorial jurisdiction. European Union actions effectively establish baseline expectations that influence corporate governance globally, as companies typically avoid maintaining multiple compliance systems when a single, higher standard can apply uniformly.
The commission's case builds upon earlier allegations that TikTok's design facilitates addictive behaviour, part of a comprehensive investigation into platform architecture. Vice President Henna Virkkunen framed the issue in terms of fundamental rights, asserting that minor users deserve protection from the moment they access online services. Her remarks emphasise that corporations cannot defend inadequate safety measures by claiming that alternative configurations exist somewhere within settings menus—the default experience, according to this regulatory perspective, must embed protections directly into platform design rather than requiring active user intervention.
These enforcement actions occur against a shifting political landscape within Europe regarding age restrictions on social media. Several member states have advanced national proposals banning children from platforms entirely, reflecting growing frustration with industry self-regulation. France recently became the first EU nation to legislate such a ban, with parliament passing age 15 restrictions by substantial majority on July 21. This development suggests that individual platform accountability measures may increasingly be supplanted by categorical restrictions that bypass platform design questions altogether.
Commission President Ursula von der Leyen has previously signalled support for age-based social media restrictions, positioning her institution as receptive to legislative approaches that transcend platform-specific enforcement. This convergence between company-focused regulatory pressure and calls for categorical bans creates a two-track strategy: platforms face immediate compliance demands under existing law while simultaneously confronting the political possibility that such efforts may become moot if member states collectively prohibit child access entirely.
TikTok has mounted a defence centring on the suite of privacy and security features available to teenage users from account creation. The platform emphasises that teen accounts incorporate more than 50 pre-configured protections and restricts direct messaging capabilities for younger adolescents, distinguishing itself from some competitor platforms on this dimension. However, regulators appear unconvinced that voluntary configurations constitute adequate protection when default settings remain problematic and algorithmic systems actively work against child safety by promoting visible teen content.
With more than 200 million European users, TikTok represents one of the continent's most consequential digital properties, particularly among younger demographics who constitute the platform's core growth market. The European Commission's enforcement action against this scale of user engagement signals determination to assert regulatory control over major technology platforms regardless of their market dominance or corporate profitability. For Malaysian observers, the proceedings illustrate how regulatory initiatives in major economies increasingly establish de facto global standards, particularly when enforcement mechanisms carry financial consequences that corporations cannot compartmentalise to specific regions.
The regulatory dispute reflects deeper tensions between Silicon Valley design philosophies and European social policy frameworks. American platforms have historically emphasised user choice and configuration flexibility as the basis for safety, while European regulators increasingly demand that protective outcomes be achieved through structural architecture rather than user decision-making. This philosophical divide shapes not merely TikTok's exposure but the entire trajectory of technology regulation globally, as European precedents increasingly influence multinational corporate compliance strategies across jurisdictions where competing regulatory models had previously coexisted.
