UK social media ban for under-16s targets addictive algorithms by 2027

This regulatory shift forces a transition from voluntary safety features to mandatory architectural changes, specifically targeting the engagement-based business models of TikTok and Meta. By focusing on recommender systems and infinite scroll, the UK is setting a precedent for how governments might regulate the 'attention economy' rather than just content. For the broader streaming and social ecosystem, this signals a move toward principle-based frameworks that require platforms to prove safety before deployment. Watch for Ofcom to release its register of categorized services, which will define which specific platforms face the most stringent identity-verification and transparency requirements.

Ofcom has been methodically building its enforcement apparatus under the Online Safety Act, with a series of escalating actions targeting platforms that fail to meet their obligations. In March 2025, Ofcom opened an enforcement programme to monitor whether providers are complying with their illegal content risk assessment duties, issuing formal information requests to providers of a number of services including the largest social media platforms. The regulator warned that any platform failing to provide a satisfactory response by the deadline would face formal investigation. On 1 April 2026, Ofcom escalated further, issuing formal information requests to 30 providers covering 43 services and requesting records of more than 70 risk assessments, with a submission deadline of 31 July 2026.

The penalty framework underpinning the UK social media ban gives Ofcom significant leverage over platforms like TikTok, Instagram, and Facebook. Ofcom's enforcement guidance confirms it can impose financial penalties of up to 10% of qualifying worldwide revenue or £18 million, whichever is greater, and can also apply to a court to block a site in the UK in the most serious cases. The regulator has already demonstrated willingness to use these powers, having opened three separate enforcement programmes by mid-March 2025 alone, including one focused on age assurance measures in the adult sector. Ofcom has also written to services putting them on notice regarding child sexual abuse material compliance, requiring them to submit their illegal harms risk assessments and detailing the measures they have in place.

The technical requirements that platforms must meet under the Online Safety Act are becoming increasingly specific, particularly around content detection and age assurance. Ofcom's codes of practice define a large service as one with an average user base of 7 million or more per month in the UK, equivalent to approximately 10% of the UK population, with certain measures applying to services of differing sizes or risk levels. These include requirements to apply specific automated tools to detect and remove child sexual abuse material from user-to-user services. The enforcement guidance also specifies that Ofcom can require service providers to implement as a remedial step, signaling that the regulator views age verification as a core compliance mechanism that will likely extend to the when it takes effect in spring 2027.