UK Regulator Puts TikTok's 'Age Assurance' Under the Microscope: A Precedent for Online Safety

The UK’s online regulator, Ofcom, has launched a formal investigation into TikTok, raising fundamental questions about the platform’s efficacy in protecting children from exposure to harmful content. The probe, initiated almost a year after the Online Safety Act came into effect, specifically targets TikTok's age verification methods, which Ofcom believes may have failed to correctly identify “a significant proportion of children.”

At the core of Ofcom's concern is TikTok's reliance on inferential age assurance techniques. While TikTok states it requires users to input a date of birth and employs “technology that looks at information, often called ‘signals’,” Ofcom has voiced “particular concerns” that these methods are insufficient. The regulator highlighted that this potential failure puts young users at risk of encountering distressing material, including posts about disordered eating, self-harm, suicide, and pornography. The stakes are considerable, with potential penalties for non-compliance reaching up to £18 million or 10% of qualifying worldwide revenue, whichever sum is greater. In extreme instances, Ofcom holds the power to block or restrict non-compliant sites within the UK.

This investigation is more than a mere slap on the wrist; it signals a determined assertion of regulatory authority under the new Online Safety Act. Ofcom's explicit questioning of TikTok's age inference models — and by extension, similar practices across the industry — underscores a shift towards demanding demonstrable effectiveness rather than relying on platforms’ self-declared measures. The regulator’s guidance is clear: platforms using age inference models for child protection duties “should switch to other methods listed in our guidance as highly effective without delay.” This directive is particularly pointed given Ofcom's “serious doubts” about other platforms employing similar techniques based on indicators like nicknames, biographies, voice, facial features, and content viewed.

The timing of Ofcom’s intervention is critical, coinciding with the UK government’s preparations for a social media ban for under-16s set to launch “early next year.” This impending policy amplifies the scrutiny on how tech companies verify user ages, suggesting a tightening regulatory environment that will impact the broader digital landscape. The sheer scale of youth engagement further underscores the urgency: Ofcom’s studies reveal TikTok is the third most used site by 8- to 14-year-olds in the UK, with children spending an average of eight hours and 45 minutes weekly on video-sharing platforms. This pervasive use, coupled with findings like one in ten teenagers aged 15-17 still accessing dating apps despite existing age checks, illustrates a systemic challenge that goes beyond a single platform. The implication is clear: the era of passive compliance or self-regulation on child safety is waning, replaced by an increasingly assertive regulatory push for transparent and verifiable safeguards.