Ireland's Media Regulator Opens First Online Safety Investigation into X Over Failure to Protect Children from Harmful Content
Coimisiún na Meán, Ireland's media regulator, has launched its first formal investigation under the Online Safety Code, targeting the social media platform X over concerns that the company is failing to implement effective age assurance mechanisms and parental controls to prevent children from accessing pornography and gratuitous violence — an action that could result in fines of up to 10% of the platform's relevant annual turnover if violations are established.
Background
Coimisiún na Meán was established as Ireland's new media regulator in 2023, taking over the functions of the Broadcasting Authority of Ireland and acquiring significant new powers under the Online Safety and Media Regulation Act. As the designated regulator for major online platforms under the EU Digital Services Act — a role that derives from the fact that many of the world's largest technology companies have their European headquarters in Ireland — the commission occupies a uniquely influential position in the global effort to regulate online content.
The Online Safety Code, which came into force in 2024, sets out specific obligations for designated online platforms in relation to the protection of users, with particular emphasis on the protection of children. The code requires platforms to implement effective age assurance mechanisms to prevent children from accessing adult-only content, and to provide robust parental control systems that are easily discoverable and highlighted to new users during the account sign-up process.
X — formerly known as Twitter — has been a source of significant regulatory concern since its acquisition by Elon Musk in 2022. The platform's decision to reduce its trust and safety workforce, relax content moderation policies, and introduce a subscription-based verification system has been widely criticised by child safety advocates, regulators, and governments across Europe and beyond. The Irish investigation is the first formal enforcement action taken against X under the Online Safety Code, though the commission is also managing five other investigations into various platforms under the Digital Services Act.
Key Developments
The investigation was launched on Monday, 8 September, following internal reviews by Coimisiún na Meán's Platform Supervision team, which identified concerns regarding how X manages child safety. The probe is being conducted pursuant to Part 8B of the Broadcasting Act 2009 as amended, and focuses on two specific areas: the platform's age assurance mechanisms for adult-only video content, and the effectiveness of its parental control systems.
Digital Services Commissioner John Evans stated that children have a fundamental right to participate in the digital world while being protected from harm, abuse, and exploitation. He noted that age assurance methods relying solely on self-declaration — the approach currently used by X — are insufficient and do not meet the standards required by the Online Safety Code. "The primary objective of the Online Safety Code is to empower parents and guardians with stronger tools to manage their children's online experiences," Evans said. "Where platforms fall short of these obligations, we will act."
If X is found to be in violation of the Online Safety Code, Coimisiún na Meán holds the authority to impose administrative financial sanctions of up to 10% of the platform's relevant annual turnover or €20 million, whichever is greater. X has been given the opportunity to respond to the investigation's terms of reference.
Why It Matters
The significance of this investigation extends well beyond the specific question of X's compliance with Irish law. As the designated regulator for major online platforms under the EU Digital Services Act, Coimisiún na Meán's decisions have implications across all 27 EU member states. A finding that X has violated the Online Safety Code would set a precedent for how similar obligations are enforced across the bloc, and would send a clear signal to other platforms that Ireland's regulatory framework has real teeth. The investigation also reflects a broader shift in the political and regulatory environment around online safety. Governments across Europe and beyond have grown increasingly impatient with the major platforms' self-regulatory approach to child protection, and the introduction of mandatory age assurance requirements — backed by meaningful financial penalties — represents a significant escalation of regulatory ambition. Ireland, as the home of many of the world's largest technology companies, is at the centre of this shift.
Local Impact
For Irish families, the investigation is a tangible expression of the state's commitment to protecting children online — a commitment that has been tested repeatedly by high-profile cases of children being exposed to harmful content through social media platforms. Parents' organisations across the country have welcomed the investigation, with the National Parents Council describing it as "a significant step forward" in the effort to make the online environment safer for young people. Schools and youth organisations have also expressed support, noting that the challenge of managing children's online activity has become one of the most pressing issues facing parents and educators in contemporary Ireland. The investigation is expected to take several months to complete, with a formal decision expected in 2027.
What's Next
Coimisiún na Meán has given X a period of time to respond to the investigation's terms of reference and to provide information about its current age assurance and parental control systems. The commission will then assess this information against the requirements of the Online Safety Code before making a formal determination. If violations are found, the commission will initiate a sanctions process, which includes the right of appeal. The investigation is expected to conclude within six to nine months. Separately, the commission is participating in four joint investigations with the European Commission under the Digital Services Act, which may result in coordinated enforcement action across multiple jurisdictions.
