EU says TikTok's 'For You' feed breaches digital law over 'rabbit hole' effect

The European Commission said on Friday that TikTok has preliminarily breached the European Union's Digital Services Act through what regulators call the "rabbit hole effect" of its "For You" recommendation feed, opening the way to a fine of up to 6 percent of the global annual turnover of its parent company, ByteDance, if the finding is confirmed.

In a statement published by the Commission's digital policy department, officials said TikTok's algorithm pushes users toward an "endless and repeated" stream of videos once they engage with a certain type of content, including material related to sadness, isolation or body image. That pattern, the Commission said, can have "a detrimental impact" on the mental health of users, particularly minors and vulnerable adults. The findings concern both TikTok's risk assessment of the feed and the measures it has taken to limit the harm.

A third strike this year

Friday's announcement is the latest in a string of EU actions against TikTok under the Digital Services Act, the bloc's main law governing how large online platforms must police their own design and content. In February, the Commission issued a separate preliminary finding that TikTok's infinite scroll, autoplay and push notifications also breach the law, concluding the company had not properly assessed how those features could harm users, according to the Commission's own account of that earlier decision. In July, the Commission issued a further preliminary finding that TikTok's privacy settings for teenage accounts fall short of the law's child-protection standards, and it opened a parallel case against Meta over the design of the Facebook and Instagram feeds, according to Al Jazeera's report on Friday's announcement.

Each of these cases rests on the same enforcement tool: a "very large online platform" designation under the Digital Services Act, which applies once a service reaches more than 45 million average monthly users in the EU, equivalent to roughly 10 percent of the bloc's population, according to the Commission's list of designated platforms. TikTok cleared that threshold years ago and has remained subject to the law's strictest obligations, including regular risk assessments and independent audits, ever since.

What regulators are objecting to

The "rabbit hole" complaint is narrower than it might sound. Commission officials are not arguing that TikTok's recommender system is illegal in principle; the Digital Services Act does not ban personalised feeds outright. Instead, the preliminary finding says TikTok failed to adequately assess the risk that its own feed could trap users, especially minors and people already struggling with their mental health, in loops of similar and potentially harmful content, and that its existing safeguards do not sufficiently mitigate that risk. Under the law's general framework, described in the Commission's own overview of the Digital Services Act, a confirmed breach of this kind can bring fines of up to 6 percent of a company's worldwide annual turnover, along with binding orders to change the service.

"The algorithm serves more of the same, leading users down rabbit holes they cannot easily escape from," Henna Virkkunen, the Commission's executive vice-president for tech sovereignty, security and democracy, said in a statement reported by Al Jazeera, adding that TikTok "needs to step up its efforts to protect users' well-being," including that of minors.

As with the February and July findings, Friday's announcement is preliminary. TikTok can examine the Commission's investigation file and respond in writing before officials issue a final decision, a process that in the company's earlier cases has stretched from months to well over a year. There is no indication yet of when a final ruling on the recommender-feed case will come.

Who is affected

The immediate parties are TikTok's tens of millions of users across the 27-member bloc — a base that cleared the 45-million threshold years ago and has grown substantially since — and the creators who depend on the For You feed to reach audiences, since any mandated change to the algorithm would alter how content is surfaced and rewarded on the platform. ByteDance faces the direct financial exposure: a confirmed breach could, in theory, translate into a fine running into the billions of dollars given the company's global revenue, though the Commission has not calculated a specific figure at this preliminary stage. More broadly, the case lands alongside parallel EU scrutiny of Meta's Facebook and Instagram feeds, suggesting Brussels is treating algorithmic recommendation systems across the industry, not just TikTok's, as a single regulatory target.

National governments are moving on a related but separate track. Several EU countries, including France and Spain, have pursued or introduced their own restrictions on social media use by younger teenagers, a sign that concern over algorithmic feeds and youth mental health extends beyond Brussels' own casework.

Reaction

TikTok rejected the findings. A company spokesperson said the Commission's conclusions were "fundamentally inaccurate" and distorted both the platform's design and its commitment to user safety, adding that TikTok has a strong record of protecting its community and gives users direct control over the content they see. The company took a similar line after February's addictive-design finding, which it described at the time as a mischaracterisation of its app.

Consumer advocates have pushed in the opposite direction. Responding to February's finding, Agustín Reyna, director general of the European consumer organisation BEUC, said in a statement from the group that "it is good news that the Commission is taking action against TikTok for potentially breaking the Digital Services Act," arguing that "only strong enforcement will ensure that platforms take their responsibilities seriously" and that "TikTok must now deliver real design changes." BEUC has not yet issued a public response to Friday's rabbit-hole finding specifically.

What happens next

No fine has been imposed, and none can be until the Commission completes its review of TikTok's written defence and issues a final decision, which could still result in no breach being confirmed. If the Commission does confirm the finding, it is expected to order specific changes to how the For You feed recommends content, on top of any penalty, following the pattern set by its February order over infinite scroll and autoplay. TikTok's parallel disputes over minors' account settings, researcher data access and advertising transparency remain open as well, meaning the company is now contesting at least three separate Digital Services Act cases in Brussels at once. The outcome will be watched closely well beyond TikTok: a finding against the For You feed's design would give the Commission a template for the ongoing Meta investigation and for any future case against other personalised recommendation systems operating in the EU.