EU Takes Aim at the World’s Biggest Porn Platforms — Billions in Fines at Stake

Brussels has escalated its campaign to protect children from harmful online content, formally accusing four of the world’s largest adult content platforms of failing to prevent minors from accessing explicit material. The European Commission announced on Thursday that Pornhub, Stripchat, XNXX and XVideos have not adequately assessed the risks their platforms pose to children, and have failed to implement effective age verification or access control measures capable of keeping under-18s off their services.

“Children are accessing adult content at increasingly younger ages and these platforms must put in place robust, privacy-preserving and effective measures to keep minors off their services,” said Henna Virkkunen, the EU’s technology commissioner.

The preliminary findings are the result of an investigation that began in May 2025, running in parallel with enforcement actions by individual EU member states against smaller pornographic platforms — a coordinated effort designed to ensure consistent enforcement across the bloc rather than a patchwork of national responses.

The legal instrument behind the action is the Digital Services Act, the EU’s landmark online regulation that requires large platforms to police their content more aggressively, conduct systemic risk assessments and implement measures proportionate to those risks. As EBM’s analysis of DSA enforcement has shown, the Act imposes escalating obligations on very large online platforms, with direct Commission oversight and penalties of up to 6% of global annual turnover for confirmed breaches.

So far, only Elon Musk’s X has been fined under the DSA — €120 million for transparency violations — making Thursday’s move against the adult content platforms a significant expansion of the regulation’s enforcement perimeter.

The financial exposure for the platforms is difficult to quantify precisely given that none of them publicly disclose recent financial performance. However, Aylo, the company that owns Pornhub, reportedly generated revenues exceeding $450 million in 2022.

A fine at the DSA’s maximum 6% rate against that revenue base would run into the tens of millions of dollars. For the other privately owned platforms — which operate at comparable scale given their positions among the world’s most visited websites — the exposure is similarly material.

The regulatory pressure on adult content platforms predates the DSA. Global regulators have spent years attempting to address the challenge posed by user-generated platforms that host millions of pieces of content uploaded by individuals rather than produced by the platform itself, creating liability questions that legacy frameworks were never designed to answer.

In the EU, the DSA was explicitly designed to close that gap — placing the obligation to assess and mitigate systemic risks squarely on the platforms themselves, regardless of whether the harmful content was commercially produced or user-generated.

The case is also part of a broader pattern of DSA enforcement that is expanding from social media into sectors that regulators had previously treated as peripheral. As the EU’s tech enforcement agenda has intensified in 2026, with fines against Google, Apple, Meta and X totalling billions of euros, Brussels has demonstrated both the appetite and the legal mechanisms to pursue companies across industries — not just the American tech giants that have attracted the most attention in Washington. The adult content platforms present a politically easier target, given the broad consensus across member states on the need to protect children online.

The preliminary findings do not constitute a final decision. The four platforms will have the opportunity to respond before any formal conclusion is reached. However, the Commission’s track record on DSA enforcement — combined with the explicit and repeated warnings from Virkkunen about the urgency of child protection online — suggests Brussels is unlikely to accept anything short of substantive change. As the EU’s DSA framework continues to mature, Thursday’s action signals that the regulation’s reach extends well beyond the Silicon Valley platforms that have dominated the enforcement conversation — and that any large online platform operating in Europe without adequate child protection measures is now in the Commission’s sights.

Subscribe to our free weekly newsletter https://europeanbusinessmagazine.beehiiv.com/