Meta is now under formal investigation in the UK following communications regulator Ofcom questioning whether it had done sufficient safety risk assessments before it launched Instagram Instants. Meta is being investigated in relation to whether it was in compliance with the UK’s Online Safety Act before starting a new Instagram feature in May.
Ofcom launched the investigation on October 6 and investigated whether Meta properly considered the potential risks associated with illegal content and the safety of children before reaching Instants to users. An investigation doesn’t mean Meta has broken the law, the regulator said. Instead, Ofcom will collect evidence and determine whether the company fulfilled its statutory obligations.
But Meta is under regulatory pressure from governments and online safety authorities because big technology platforms are more and more concerned with how they assess risks before introducing new features.
What Is Instagram Instants?
Meta launched Instagram Instants on May 13, 2026. It is available through Instagram Direct and it lets you take pictures and share videos in Instagram directly.
The content shared through Instants is meant to be temporary, and the content disappears once it has been viewed. Ofcom's description of the feature says users can add a caption before taking a photo or video, after which the content is automatically shared with friends or followers. The feature also prevents screenshots of Instants content.
The temporary nature of the content is now an important part of Ofcom's examination. Meta should be able to understand how the feature could be used or misused, such as the possibility that children might be exposed to illegal or harmful material, the regulator said.
The investigation is specifically focused on the risk assessment process of the launch rather than just the existence of safety features within Instants.
Ofcom Questions Meta’s Pre-Launch Safety Assessment
Under the UK's Online Safety Act, regulated user-to-user services must conduct suitable and sufficient risk assessments covering illegal content. Platforms that are likely to be accessed by children are also required to conduct assessments relating to risks to under-18 users.
The law also requires providers to undertake further risk assessments of their services before major changes to their services and will require them to make changes to the design or operations of their services. Ofcom says this requirement is to make sure safety is taken into account before a feature is available to users rather than after problems become apparent.
The regulator is reviewing whether Meta failed to carry out appropriate and sufficient additional assessments in connection with the launch of Instants.
George Lusty, Ofcom's Director of Enforcement, said significant changes to online platforms need to be risk assessed before they are launched. He said risk assessment was a necessary part of building safety into online services from the start.
The investigation will now determine if there are reasonable grounds to conclude Meta failed to comply with the relevant provisions of the Online Safety Act.
Meta Says It Conducted A Risk Analysis
Meta has rejected any suggestion that it failed to take its regulatory obligations seriously. Meta said in its response that it is aware of its obligations under the Online Safety Act as well and had done a risk analysis before introducing Instants.
The company also noted that it had briefed Ofcom on the feature before it launched. Meta has pointed to several protections built into Instants, including restrictions on screenshots, reshares, and forwarding.
Meta also said that there is no public feed for Instants and that protections associated with Instagram Teen Accounts are automatically applied. These measures, the company said, were meant to address possible safety issues associated with the feature.
The difference between Meta’s position and Ofcom’s concerns means the investigation will now focus on the evidence surrounding the company’s risk assessment process.
Investigation Does Not Mean Meta Has Been Found In Breach
Ofcom has said that opening the investigation does not mean Meta has a firm answer. The regulator's process involves gathering and analysing evidence before reaching a conclusion.
If Ofcom identifies potential compliance failures, Meta would have an opportunity to respond to the regulator's findings before a final decision is made. So it is expected to take place in many stages.
The regulator has also set out what might happen if a breach of the Online Safety Act is ultimately discovered. Ofcom could impose fines of up to £18 million or 10 per cent of qualifying worldwide revenue (or more, if one’s company has a large worldwide revenue). It may also demand that platforms take specific steps to comply with their legal obligations or make up any harm caused by the breach.
Meta Already Facing Wider UK Regulatory Pressure
The investigation comes as Meta is also questioning aspects of the UK’s online safety regulatory framework. Meta is also among technology companies challenging certain Ofcom information requests under the Online Safety Act, including requests for information on content moderation and users’ exposure to harmful material, it said.
Meta has also challenged aspects of the regulatory system concerning information requirements and fees charged by Ofcom.
The larger issues underline the ever more complex relationship of large technology companies with regulators as governments try to hold platforms operating in their markets to a higher standard.
For Meta, the Instants investigation adds another layer of scrutiny specifically focused on how safety risks are considered during product development and rollout.
Child Safety Remains A Major Focus
The protection of children is now a central issue in online platform regulation. Ofcom has stressed that companies need to understand how product features could create or increase risks for young users.
Earlier in 2026, Ofcom had also called on big platforms used by children, including Instagram, to show more action to protect young users online.
Therefore, the Instants case could be a very important test of how regulators perceive the need for platforms to evaluate risk before major product changes.
And the investigation also shows a broader shift in online safety regulation for users as well. Instead of waiting for harmful content or incidents to emerge from a feature after it is available to users, regulators are expecting technology companies to recognize potential risks early on in the design and development process.
The outcome of the Ofcom investigation will determine whether Meta complied with those requirements when it introduced Instagram Instants. Until the regulator reaches a final decision, the allegations remain under investigation and Meta has not been found to have breached the UK's Online Safety Act.
