AEPD initiates enforcement actions against TikTok for child sexual abuse content

What happened

The Spanish Data Protection Agency (AEPD) has opened investigations after a report on TikTok's distribution of child sexual abuse material. It has requested links from the journalist outlet Maldita.es, demanded information from TikTok on content removal, and plans to order blocking of illegal content. The agency will coordinate with the Irish DPC, the European Data Protection Board, and other EU authorities.

Why it matters for trust and compliance

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The action demonstrates enforcement of EU data‑protection rules to protect minors on online platforms.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Map the security requirements to existing controls and close gaps.
3. Review age assurance and protections for minors' data.