The EU just made TikTok’s minors-safety problem expensive. In its latest findings, the regulator says TikTok has not done enough to ensure minors' safety, and the enforcement exposure could come with a fine of up to six percent of TikTok's annual revenue.

That “up to” number matters because it changes how leadership should think about risk. A penalty pegged to annual revenue is not a slap on the wrist, it is a direct hit to financials that can show up in budgets, investor narratives, and board oversight. And because the EU is tying the stakes to TikTok’s overall revenue rather than a fixed dollar amount, the bigger TikTok gets, the bigger the potential upside and downside become.

To understand why this is such a big deal, you have to zoom out from TikTok for a moment and look at how EU enforcement typically works. The EU has spent years trying to make online platforms take responsibility for harms that happen on their services, especially where minors are involved. The logic is straightforward: if a service is designed and used at scale, it also has outsized influence over what minors see, how they interact, and how quickly risky content or behaviors can spread.

For executives, the challenge is that “safety” is not one thing. Minors face multiple risks across modern platforms, including exposure to harmful content and the downstream effects of engagement loops. Regulators often want to see more than broad commitments. They look for concrete safety measures, credible enforcement, and changes that are measurable and sustained. In this case, the EU’s conclusion is that TikTok has not yet met the bar the regulator is applying.

This is where incentive pressure gets real. TikTok, like other high-growth social platforms, operates with a constant tension between engagement and moderation costs. Stronger safety enforcement can reduce certain kinds of reach and change user experience. But weaker enforcement can trigger regulatory scrutiny and fines that scale with revenue. When the EU threatens up to six percent of annual revenue, it signals that the compliance conversation is no longer optional and it is no longer just a legal department issue.

There is also a governance angle for boards. When regulators frame potential penalties as revenue-linked, it forces board members to ask not only “Are we compliant?” but “How is compliance risk being managed like financial risk?” That includes oversight structures, internal metrics, escalation pathways, and whether safety improvements are treated as product work rather than policy paperwork. In other words, it becomes a question of whether the board can trust the company’s ability to fix problems fast enough to satisfy the regulator.

Second-order implications extend beyond TikTok, because other platforms will treat this as a reference point. If the EU can credibly discuss fines up to six percent tied to minors’ safety, compliance teams elsewhere will have to recalibrate their assumptions about how aggressively enforcement can scale. For investors and operators, that changes the underwriting of regulation: the probability and magnitude of penalties may be higher than what many models assumed when they focused only on slower, incremental changes.

Finally, there is a strategic stake that should not be underestimated. TikTok leadership now has a direct reason to accelerate safety measures and to communicate progress in a way that regulators and stakeholders can evaluate. The EU’s latest findings do not just say “be better.” They suggest a financial ceiling for delay. For any executive operating in Europe, this is a reminder that product choices can become financial exposure when regulators decide the harm is material and the fix is overdue.