Follow us on Google News
Spain’s data protection regulator has opened an investigation into allegations that child sexual abuse material circulated on TikTok, but has declined the government’s request to temporarily suspend the social media platform nationwide.
The Spanish Data Protection Agency (AEPD) announced its decision on November 11, 2026, following an investigation by Spanish fact-checking organisation Maldita.es into the alleged distribution of illegal material involving children.
The regulator said it would examine specific content and consider targeted restrictions rather than immediately blocking the entire platform. Separately, Spain’s attorney general has directed cybercrime prosecutors to investigate potential criminal offences connected with the material.
Investigation Raises Serious Questions About Child Safety
The regulatory action follows findings published by Maldita.es concerning the alleged circulation of child sexual abuse material on TikTok.
The investigation documented 1,183 posts containing suspected abusive material involving minors and reported that the content had accumulated at least 48 million views.
It also identified extensive interaction with the material, raising concerns about how illegal content could remain accessible and circulate through a major social media platform.
The findings prompted demands for stronger enforcement and urgent action to protect children.
Spain’s Ministry of Youth and Childhood called for TikTok to suspend operations in the country until the reported material was removed.
Youth and Childhood Minister Sira Rego also sought intervention from the country’s data protection authority, arguing that the seriousness of the allegations required immediate protective measures.
The ministry’s position reflected growing frustration among European officials over the ability of online platforms to detect and remove harmful content involving minors.
However, responsibility for determining whether emergency regulatory measures are legally justified rests with the relevant independent authorities.
Spanish Regulator Chooses Targeted Restrictions Over Nationwide Ban
The AEPD acknowledged the seriousness of the allegations and announced that it had initiated an investigation.
However, it did not accept the government’s proposal to impose an immediate nationwide suspension of TikTok.
Instead, the watchdog said it would request information from Maldita.es identifying the specific links and content highlighted during its investigation.
The regulator also intends to obtain information from TikTok about the actions it has taken to remove the reported material.
After examining the evidence, the agency plans to pursue restrictions targeting particular content that involves unlawful processing of children’s personal data.
The approach is intended to address the alleged violations while respecting the legal principles governing restrictions on digital platforms.
A nationwide suspension would affect access to TikTok across Spain, including users and content unrelated to the investigation.
Targeted restrictions, by contrast, would focus enforcement on the material identified as unlawful.
The AEPD said its response must remain proportionate and consistent with protections for freedom of expression and information.
The decision does not prevent further enforcement if investigators uncover additional violations or circumstances requiring stronger intervention.
European Data Protection Rules Complicate Enforcement
TikTok’s European headquarters are located in Ireland, making the Irish Data Protection Commission its lead privacy regulator under the European Union’s data protection framework.
This arrangement affects how other national regulators can exercise their powers over the platform.
Although Spain’s AEPD can investigate issues affecting people within its jurisdiction, certain regulatory measures require coordination with the Irish authority.
The Spanish watchdog said it would share relevant information with Ireland’s data protection regulator and other European authorities.
It also intends to communicate with the European Commission, which has responsibilities relating to the Digital Services Act.
The European Union has increasingly placed pressure on large online platforms to address systemic risks, including the exposure of children to harmful and illegal content.
These obligations create expectations that technology companies maintain effective systems for reporting, detecting and removing illegal material.
However, regulatory action must also follow established legal procedures.
The Spanish case illustrates the difficulties authorities face when an alleged violation crosses national borders and involves a platform operating under several overlapping European regulatory frameworks.
What This Means For You
The investigation highlights the importance of online child protection and the responsibility of social media companies to respond quickly to reports of illegal material.
For parents and guardians, the case is a reminder that platform safety tools cannot guarantee that every harmful post will be detected immediately.
Users who encounter suspected child sexual abuse material should report it through the platform’s reporting mechanisms and appropriate law enforcement channels. They should not download, forward or redistribute such content.
For technology companies, the case demonstrates that regulators are examining not only whether illegal material exists on a platform but also how effectively reported content is removed.
Spain’s decision to investigate TikTok without imposing an immediate nationwide ban may also influence discussions elsewhere about balancing child protection, platform accountability and proportionate regulatory enforcement.
