Brussels has aimed its newest regulatory machine at TikTok — and this time the company in the crosshairs is not an American one. The European Commission has signalled that the way the app handles accounts belonging to minors may break EU rules, the Wall Street Journal reports, in a move Quartz framed as charges over breaching children's privacy rules.

The Digital Services Act is the EU's rulebook for online platforms; for the very largest services it is enforced directly by the European Commission, not by national regulators.

A preliminary charge, not a verdict

The key word is preliminary. The Journal's headline says the accounts 'might' breach the bloc's digital rules — the Commission has set out an early view of where TikTok falls short, not handed down a ruling. Under the EU's Digital Services Act, that step arrives as preliminary findings: the regulator's charge sheet, which the company can still contest before anything is settled.

Privacy rules, or design rules?

The two reports frame it slightly differently — the Journal points at the bloc's digital rulebook, Quartz at children's privacy. The DSA sits behind both. It obliges the largest platforms to build strong protections for minors into the product itself and bars them from profiling children for targeted ads, so a complaint about how young users' accounts are set up is squarely DSA territory, not just a data-protection matter.

Who decides — and by what procedure

This is what sets the DSA apart from older EU tech laws policed by national watchdogs. For the biggest services — the very large online platforms designated under the law, TikTok among them — the European Commission itself is the enforcer. It opens proceedings, gathers evidence and issues the findings. TikTok now gets its turn: access to the file and a chance to rebut the objections or offer changes. Only after that can the Commission move to a formal decision.

The number that gives it teeth

If the process ends in a confirmed breach, the DSA lets the Commission impose fines of up to 6% of a company's global annual turnover, alongside binding orders to change how the product works. Crucially, that ceiling is measured against the entire worldwide business, not just the European arm.

Why a Chinese-owned app matters here

The bigger picture: the DSA is often read as Europe's lever against American Big Tech. A preliminary charge against TikTok — owned by China's ByteDance — cuts against that shorthand. Hypothesis: Brussels is demonstrating that DSA enforcement follows the platform, not the passport, pointing the same machinery at a Chinese-owned company that it aims at Silicon Valley. Supporting this: TikTok is regulated as one of the DSA's designated platforms on identical terms to its US rivals, and the case turns on product design for minors, not on nationality. Against it: this is a single preliminary step, and the sources here establish neither a broader pattern nor a final outcome.

What to watch next

Three things. Whether TikTok contests the findings or offers fixes to how it handles young users' accounts; whether the Commission's preliminary view hardens into a formal decision; and whether a fine follows. Each stage runs for months, and preliminary findings do not always end in penalties. TikTok, for its part, has room to argue its safeguards already comply — the reply stage exists precisely so a preliminary charge can be answered before it becomes a penalty.