Ofcom Probes TikTok's Age Checks

The UK's communications regulator, Ofcom, has launched an investigation into TikTok over concerns that its age inference system may not adequately protect children from age-inappropriate content. The inquiry is part of the UK's broader effort to strengthen online safety under the Online Safety Act.

On July 16, 2026, Ofcom announced a formal investigation into TikTok Information Technologies UK Limited over whether it has failed, or is failing, to comply with child-protection duties under Section 12 of the UK's Online Safety Act. The investigation focuses specifically on TikTok's use of "age inference," a system that estimates a user's age from behavioral signals and account activity rather than confirming it through a verified check like ID or facial age estimation.

The trigger: The probe wasn't launched in isolation. It landed the same day Ofcom published its first Age Assurance Report, which found that age inference models, including TikTok's, may have failed to correctly identify a significant proportion of children, leaving them exposed to harmful content. Ofcom was blunt about where TikTok's method stands in its own guidance: age inference isn't listed as a method capable of being "highly effective" for age assurance. The regulator's message to platforms generally was direct, those relying on inference models to meet their child-protection duties should switch to other, recognized methods without delay.

It also follows a pattern of prior warnings. Ofcom's May 21 children's online experiences report found that 73% of 11- to 17-year-olds encountered harmful content in a four-week period, with 53% of secondary-school-aged children who saw harmful material recalling it specifically on TikTok, more than any other platform surveyed. Around the same time, Ofcom said TikTok and YouTube had not committed to significant changes despite that evidence, with both platforms maintaining their feeds were already safe.

Timeline and stakes: Ofcom's evidence-gathering phase is expected to take at least three months, with an update due in October 2026. Importantly, opening an investigation doesn't establish a breach, Ofcom has stated explicitly that no finding of non-compliance has been made, and TikTok maintains it complies with the law using "expert-informed technology" to detect users' ages. If a breach is ultimately found, Ofcom can fine TikTok up to £18 million or 10% of its qualifying global revenue, whichever is greater (TikTok generated roughly $33.6 billion in global revenue in 2025, so the revenue-based penalty could dwarf the flat fine). In the most severe cases, Ofcom can seek a court order compelling third parties, payment processors, advertisers, or ISPs, to disrupt or block the platform's UK operations entirely.

Why age inference is the real target, not TikTok specifically. This case functions as a test of a category of technology, not just one company. Age inference is cheaper and less privacy-invasive than hard verification (no ID upload, no biometric scan), which is exactly why it's popular across the industry. If Ofcom rules it insufficient here, it effectively disqualifies a whole class of "soft" age-assurance methods industry-wide, not just for TikTok, pushing platforms toward harder verification (ID checks, facial age estimation, credit-card checks) that carry their own privacy trade-offs.

The privacy-vs-protection tension is the crux. Age inference exists partly because regulators and privacy advocates have historically pushed back against mandatory ID or biometric checks for social media access. Ofcom's move essentially says: the privacy-friendlier option isn't working well enough, tightening the screws here will likely reignite debate over whether "highly effective" age assurance is achievable without collecting more sensitive data from minors and adults alike.

Timing matters. This lands months before TikTok is reportedly set to face restrictions for kids and teens in the UK, and follows direct Parliamentary scrutiny (Ofcom's CEO testified before the Public Accounts Committee in late June). That combination, a live investigation, an unflattering data report, and looming platform-level restrictions, raises the political cost of TikTok appearing to slow-walk compliance.

Precedent-setting risk for Ofcom too. This is described as an early test of how rigorously Ofcom will actually enforce the Online Safety Act's child-protection duties against a major platform, not just publish reports about them. A weak or drawn-out outcome could undercut confidence in the regime; a strong one could set the industry benchmark for what counts as effective age assurance going forward.