Ofcom Launches Formal Probe into TikTok’s Age Assurance Compliance
Ofcom has initiated a formal investigation into ByteDance-owned TikTok to determine if the platform’s age verification and inference systems meet the “highly effective” threshold mandated by the UK’s Online Safety Act (OSA). The regulator is examining whether the platform’s current safeguards sufficiently prevent children from accessing harmful content.
The Bottom Line
- Regulatory Exposure: TikTok faces potential fines of up to 10 per cent of qualifying global revenue or £18m, depending on which figure is higher, should Ofcom conclude that its safety measures are inadequate.
- Compliance Pivot: The investigation marks a shift from regulatory guidance to active enforcement, signaling that inference-based age models are under intense scrutiny across the tech sector.
- Operational Risk: Beyond financial penalties, Ofcom retains the authority to enforce service blocks or restrict access to payment providers in cases of systemic, ongoing non-compliance.
The Shift from Guidance to Enforcement
According to Joanna Ludlam, co-chair of the investigations practice at Jenner & Block, the current Ofcom move represents a transition from “guidance and reporting into live enforcement action.” This transition is particularly significant for platforms relying on behavioral age estimation rather than rigorous, identity-based verification.
Ofcom’s scrutiny is not limited to TikTok. The regulator has expressed “serious doubts” regarding the accuracy of age inference models broadly. Because these systems estimate age based on user behavior—such as content interaction and search patterns—rather than formal documentation, they remain vulnerable to misidentification. Ofcom has explicitly stated that companies must provide “reliable and compelling evidence” that their systems are effective, or face the consequences of the OSA framework.
Financial Context and Market Implications
While TikTok maintains that it has invested billions in platform safety over the last eight years and remains “confident” in its compliance, the market math is stark.
| Regulatory Risk Category | Potential Financial/Operational Impact |
|---|---|
| Standard Monetary Penalty | Up to £18m |
| Revenue-Based Penalty | Up to 10 per cent of qualifying global annual revenue |
| Service Disruption | Potential court-ordered UK access blocks |
| Infrastructure Interference | Restriction of advertising and payment provider access |
Broader Industry Contagion
As Ofcom prepares to work with the UK government on stricter mandates—including a proposed social media ban for users under 16 and overnight curfews for 16 and 17-year-olds—the cost of compliance is expected to rise across the sector.
What the Market Expects Next
Ofcom has emphasized that the opening of this investigation does not signify a conclusion. The regulator is currently at an early stage, collecting data to determine if TikTok’s age checks consistently fail to detect a significant proportion of underage users.
