Ofcom opens an investigation into TikTok over Online Safety Act compliance, citing doubts about the effectiveness of age inference in determining users' ages
The online safety watchdog is worried about TikTok's use of “age inference” to guess users' ages.
Context & Ripple Effects
TikTok has faced a running UK compliance track: the ICO previously examined its handling of teenagers’ data and fined it over under-13 users, while Ofcom had earlier questioned the accuracy of information TikTok supplied about parental controls. TikTok’s recent European rollout of profile-based age-detection technology placed age inference at the center of its response.
The new Ofcom action shifts scrutiny from whether younger users are present on the service to whether the mechanism used to identify them is effective under the Online Safety Act. Related coverage that children use VPNs to evade age gates underscores the wider enforcement challenge: controls must work in practice, not merely exist.
First-order effects
- TikTok must defend the effectiveness of its age-inference system to Ofcom and may need to alter its child-safety controls or the evidence it provides about their performance.
- Ofcom’s investigation puts TikTok’s UK Online Safety Act compliance under formal scrutiny, adding to the company’s existing regulatory exposure around children’s data and protections.
Second-order effects
- Other platforms relying on age estimation, profile signals, or similar low-friction checks will face pressure to document accuracy and failure modes, rather than treat deployment alone as sufficient compliance.
- Demand rises for age-assurance approaches that can withstand regulator testing, but platforms will have to balance stronger checks against user drop-off and the circumvention visible in VPN use.
Third-order effects
- If Ofcom treats weak age inference as noncompliance, UK online-safety enforcement could move toward outcome-based assurance: platforms would be judged on whether children are reliably identified and protected, not simply on whether they offer safety features.
- The broader policy tension will intensify between robust child protections and privacy- and access-preserving verification; widespread workarounds could make technical effectiveness, rather than formal rule adoption, the central regulatory battleground.
The trend: This is part of a shift from platform promises of child-safety tooling toward regulatory tests of whether age-assurance systems actually work against real-world evasion and error.