A report by the UK’s Online Safety Act regulator has criticised Amazon and X for inadequate age verification and content moderation practices in the wake of a tragic incident in Southport, where three children were killed and others injured in a knife attack.
The findings, released by Ofcom, state that both platforms failed to prevent the circulation of harmful material linked to the attacker, including extremist content and misinformation, which remained accessible despite being flagged. The report highlights that Amazon’s Kindle Direct Publishing service allowed the self-publication of a manifesto by the perpetrator, which remained available for purchase and download for several days after the attack, even after being reported.
X, formerly Twitter, was criticised for slow removal of posts containing graphic details and false narratives about the attack, including conspiracy theories that spread rapidly in the hours following the incident. The platform’s reliance on user reporting and automated systems was deemed insufficient to curb the spread of harmful content during a critical window.
Ofcom’s investigation concluded that neither company met the duty of care obligations under the UK’s Online Safety Act, which requires platforms to take proactive steps to protect users, particularly children, from illegal and harmful content. The regulator noted that age verification mechanisms on both services were easily circumvented, allowing underage users to access restricted material.
In response, Amazon said it had removed the offending title and strengthened its review processes for self-published content. X stated it had updated its systems to improve the speed of content review during breaking news events and was cooperating fully with the inquiry.
The report adds to growing pressure on tech firms to implement more robust safeguards ahead of the full enforcement of the Online Safety Act later this year. Ofcom has indicated it will consider further action, including potential fines, if companies fail to demonstrate meaningful compliance.
The Southport attack, which occurred on 29 July 2024, resulted in the deaths of Bebe King, aged six, Elsie Dot Stancombe, aged seven, and Alice Dasilva Aguiar, aged nine. Ten others were injured, including eight children. The attacker, Axel Rudakubana, was sentenced to life imprisonment in January 2025 with a minimum term of 52 years.
Ofcom has not yet announced a date for any formal enforcement proceedings against Amazon or X, but confirmed that its assessment of their compliance remains ongoing.
