TikTok is under intense scrutiny from European regulators over its inadequate protections for child users, with the European Commission raising formal allegations that the platform's design exposes minors to serious safety risks. In a statement released on July 24, the commission concluded that TikTok permits children to maintain public profiles visible to non-account holders, creating pathways for predatory contact and cyberbullying. This finding represents a significant escalation in regulatory pressure against the ByteDance-owned platform, which counts more than 200 million users across Europe and commands particular sway among younger audiences.
At the heart of the commission's complaint lies concern over TikTok's algorithmic recommendation system, which actively promotes content created by teenagers aged 16 and 17 to other users. This mechanism, combined with inadequate privacy settings that make private accounts easily discoverable, violates strict safeguarding standards established under the EU's Digital Services Act. The commission argues that TikTok's default account configurations fail to meet the baseline protection requirements demanded by European law, exposing minors' accounts and their content to unnecessarily broad visibility.
The regulatory body has demanded that TikTok fundamentally redesign its approach to juvenile accounts, specifically restricting public access to content posted by minors and discontinuing algorithmic amplification of teenage creators. Henna Virkkunen, Vice President of the European Commission, underscored the principle that high-level protections for minors must be embedded into platform architecture from inception rather than left to individual user choice. Her statement reflects growing frustration across EU institutions that technology companies have long treated child safety as an optional feature rather than a core design principle.
TikTok now has the opportunity to provide a formal written response to these allegations, but the company faces substantial financial consequences if the commission ultimately determines it has breached EU law. Potential penalties could reach six percent of TikTok's global annual revenue—a figure likely to amount to billions of euros given the platform's enormous scale. Such enforcement authority marks a significant difference from regulatory frameworks in other regions, including Southeast Asia, where platforms generally face lighter penalties and less comprehensive child protection mandates.
This investigation builds upon previous commission concerns raised in February regarding TikTok's potential to foster addictive behaviour in young users. That earlier probe focused on the platform's engagement mechanics and content discovery features designed to maximise screen time. The current allegations represent a separate but complementary line of inquiry, targeting the specific ways TikTok's architecture makes children vulnerable to exploitation and harm rather than merely engagement optimisation.
For Malaysia and other Southeast Asian nations, the EU's aggressive stance carries important implications. The region's own regulatory authorities have generally been slower to impose comprehensive digital safety requirements, often deferring to industry self-regulation. However, the European Commission's willingness to levy massive fines and demand fundamental platform redesigns could inspire similar action among ASEAN member states, particularly as digital literacy experts increasingly warn that young Southeast Asian users face comparable risks on social media platforms.
The commission's action has also reinvigorated debate across Europe regarding categorical age restrictions on social media. Several EU member states have been exploring national-level bans, and France moved decisively ahead by becoming the first EU country to legislate a social media prohibition for children under 15. The French parliament passed this law by an overwhelming margin on July 21, establishing a model that other European and potentially non-European nations may emulate. Such restrictions represent a more blunt regulatory instrument than the EU's approach of mandating privacy-protective design, but they reflect growing political consensus that children's exposure to social media platforms carries unacceptable risks.
In response to the commission's allegations, TikTok defended its existing safeguards, asserting that teenage accounts come pre-equipped with over 50 privacy and security features activated upon account creation. The platform also highlighted that it restricts direct messaging capabilities for younger teenagers—a distinguishing feature that sets it apart from competitors like Instagram and Facebook. These defences suggest TikTok believes its current architecture already exceeds the baseline protections required by law, setting the stage for a substantive legal dispute about what constitutes adequate child protection in platform design.
The company's counter-arguments, however, do not directly address the commission's core concern: that default settings permit excessive public visibility and algorithmic amplification of minors' content. TikTok's position essentially contends that available privacy tools satisfy regulatory requirements, whereas the EU argues that protection standards must be applied automatically rather than left to user configuration. This philosophical disagreement reflects a broader tension in digital regulation between approaches that emphasize user choice and those that mandate protective defaults.
For Malaysian policymakers and digital regulators, the TikTok investigation offers a case study in how aggressively pursued enforcement can reshape platform behaviour. Unlike Southeast Asian nations where regulatory action often results in negotiated compliance or modest fines, the EU has demonstrated willingness to pursue penalties that genuinely threaten a platform's financial viability. This disparity in enforcement capacity and political will may eventually create divergent standards globally, with TikTok and other social media companies implementing stricter child protections in Europe while maintaining more permissive policies elsewhere.
The investigation also underscores the growing recognition that teenage users of social media platforms deserve distinct legal protections from adults. Rather than treating all users as equally autonomous agents capable of managing their own privacy settings, regulators increasingly accept that minors require mandatory safeguards embedded into platform architecture. This principle, once considered controversial by technology companies, is becoming mainstream across developed economies and may eventually influence policy approaches in Malaysia and other Southeast Asian jurisdictions.
As the commission awaits TikTok's formal response, the outcome will likely establish important precedents for how European regulators evaluate child safety across the digital ecosystem. Whether TikTok proves willing to fundamentally restructure its business model to comply with EU demands, or whether it resists and faces severe penalties, will signal the depth of the commission's resolve to enforce its digital safety agenda and may encourage other regions to adopt similarly stringent standards for protecting younger users online.
