Security News

EU Challenges TikTok's Algorithm Over Harmful 'Rabbit Hole' Content

The Record · 6 Nov 2026
Key Takeaway If your business uses social media platforms for marketing or staff communication, review your own risk assessments and safeguards regularly, because regulators are increasingly holding companies accountable for risks they have identified but not acted on.

The European Commission has accused TikTok of failing to prevent its recommendation algorithm from drawing users into "rabbit holes" of content about sadness, self-harm and body image. The preliminary findings say TikTok breached the EU's Digital Services Act (DSA). Officials said it is the first time EU regulators have directly challenged the engagement-based recommendation system of a major social media platform, and, to their knowledge, the first enforcement action of its kind worldwide.

The Commission said TikTok's "For You" feed recommends more similar content the more a user interacts with a certain type of video. Investigators found TikTok had identified some of these issues in its own risk assessments, but had not properly analysed the risks or put appropriate safeguards in place. Officials stressed the case is not about removing content. They deliberately focused on videos that are legal and within TikTok's own rules, which became damaging through repetition, particularly for young and vulnerable users.

The findings are not final, and TikTok can review the evidence and challenge them. If the violations are confirmed, the company could face a fine of up to 6% of its annual global revenue. The action comes as concern grows on both sides of the Atlantic about the risks social media poses to young users.

TikTok Digital Services Act Regulation Social Media Online Safety
Answering to more than one framework? Run them as one security and AI governance programme ->

Summarised by CISO AI from The Record, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.