What TikTok’s placement on the 2026 “Dirty Dozen” List—and Florida’s 2026 legislative record—actually tell us about protecting children online

Updated July 11, 2026

Content notice: This article discusses online grooming, sextortion, and child sexual exploitation. It does not contain graphic images or descriptions.

When a child is groomed or exploited online, the public conversation often begins—and ends—with the same question:

Where were the parents?

That question may be emotionally convenient. It is not legally, clinically, or practically sufficient.

Parents matter. Supervision matters. Digital literacy matters. But when adults can use popular platforms to identify minors, study their interests, establish contact, move conversations into more private spaces, offer gifts or attention, request sexual images, and then use those images to threaten or control the child, we are no longer discussing only an individual parenting decision.

We are discussing platform design, age verification, private messaging, content moderation, corporate responsibility, criminal law, artificial intelligence, and public policy.

And those issues cannot be placed entirely at the feet of families.

What is the “Dirty Dozen” List?

The National Center on Sexual Exploitation, or NCOSE, placed TikTok on its 2026 “Dirty Dozen” List.

Let us be precise about what that means.

The Dirty Dozen List is an annual advocacy campaign that identifies 12 corporations, organizations, institutions, or other entities that NCOSE believes facilitate, enable, or profit from sexual exploitation. It is not an official government watchlist. It is not a criminal charge. It is not a court ruling, regulatory finding, or final legal determination.

That distinction matters.

Responsible advocacy does not require us to present an allegation as an adjudicated fact. It requires us to examine the evidence, identify the concern, consider the opposing position, and determine what safeguards are—or are not—actually in place.

NCOSE’s 2026 campaign raises concerns about TikTok being used as an entry point for grooming, sextortion, child sexual abuse material, exploitation through livestreams and comments, and movement from TikTok to private messaging or other platforms. NCOSE also argues that TikTok’s expansion of photo and video sharing in messaging creates additional opportunities for offenders to isolate and manipulate young users.

TikTok, for its part, states that teen accounts include more than 50 safety, privacy, and security protections. The company points to default private settings, direct-message restrictions, content controls, screen-time limits, reporting tools, and its Family Pairing system, which allows parents to view or manage certain features of a teen’s account.

Both facts can be acknowledged at the same time:

TikTok has implemented safety features.

Child-safety advocates continue to question whether those features are sufficient, consistently enforced, difficult to bypass, and responsive to the ways offenders actually use the platform.

The existence of a written policy does not, by itself, establish effective protection.

Grooming does not usually begin with an obvious threat

One reason online exploitation is frequently misunderstood is that people expect grooming to look immediately dangerous.

It often does not.

It may begin with a compliment.

A shared interest.

A person claiming to be the same age.

A private joke.

Attention from someone who appears to understand the child.

An offer of money, game credits, gifts, modeling opportunities, cryptocurrency, or gift cards.

A request to move the conversation from a public platform to text messaging, video chat, Snapchat, WhatsApp, or another private service.

The FBI explains that offenders may use romantic attention, flattery, threats, gifts, money, or other items of value to persuade a young person to create an image. Once an offender obtains an image, the offender may threaten to distribute it unless the child provides more images, participates in additional sexual activity, or sends money.

NCMEC defines sextortion as a form of child sexual exploitation in which a child is threatened or blackmailed—often through the threatened distribution of a sexual image—in exchange for additional content, sexual activity, or money. Common tactics include false identities, pretending to be younger, quickly requesting images, developing a seemingly romantic bond, and deliberately moving the conversation between platforms.

That is why “my child knows not to talk to strangers” is not an adequate prevention plan.

The person may not feel like a stranger by the time the request is made.

Why the term CSAM matters

Florida made an important terminology change in 2026.

CS/HB 245, now Chapter 2026-18, replaced the term child pornography throughout Florida law with child sexual abuse material, or CSAM. The law took effect July 1, 2026.

That change was intentional and appropriate.

The word pornography is commonly associated with material created and distributed by consenting adults. Children cannot consent to being sexually exploited. The images and videos involved are evidence of abuse—not a category of consensual entertainment.

The United States Department of Justice similarly explains that sexually explicit images involving children represent underlying abuse, molestation, rape, or exploitation and create a permanent record of a child’s victimization.

However, another point must be made clear:

HB 245 was primarily a terminology bill.

The Legislature’s summary specifically states that changing the terminology did not substantively change the existing definitions or elements of the related criminal offenses. It changed how Florida law names the material, which is meaningful, but it did not create broad new platform-accountability requirements.

Language matters.

But language alone does not prevent the abuse.

HB 1159: Florida strengthened criminal penalties

Florida also enacted CS/CS/HB 1159, a broader sexual-offenses law that became Chapter 2026-20 and took effect July 1, 2026.

Among numerous provisions, the law increases penalties for certain offenses involving the possession, solicitation, intentional viewing, creation, and transmission of child sexual abuse material. It also increases penalties involving intentionally generated CSAM, including certain AI-created material, and prohibits transmitting CSAM to another person. The legislation passed the Florida House 105–0 and the Senate 37–0.

Those changes are significant.

They give prosecutors stronger tools in cases involving sexual exploitation, repeat offenders, generated material, and the electronic transmission of abusive content.

But we should not confuse criminal accountability with primary prevention.

Criminal laws generally become operational after an offender has created, possessed, solicited, viewed, transmitted, or otherwise engaged with illegal material.

By that point, a child may already have been groomed, threatened, photographed, recorded, manipulated, or exploited.

Punishment is necessary.

Punishment is not the same thing as preventing access to the child in the first place.

SB 1722: Proposed app-store accountability did not become law

SB 1722, titled “Application Stores” and described in the bill text as the App Store Accountability Act, attempted to address the issue farther upstream.

The proposal would have required app-store providers to take specified steps to verify the ages of account holders, obtain parental consent for accounts held by minors, protect certain personal information, and provide a civil cause of action for some violations.

The bill received a unanimous 9–0 favorable vote in the Senate Commerce and Tourism Committee. It then moved to the Senate Judiciary Committee, where it died when the 2026 regular session ended. It did not become Florida law.

That final sentence matters.

A favorable committee vote is not enactment.

A press release is not enactment.

A bill number is not proof that a protection currently exists.

Until legislation passes both chambers, completes the required process, and becomes law, it remains a proposal.

SB 1722 would have shifted some responsibility toward the point at which minors obtain and access applications. Whether its exact language represented the best constitutional and technological approach is open to legitimate debate. Age-verification legislation can raise privacy, implementation, and constitutional concerns.

But the underlying policy question remains valid:

Should parents be expected to individually investigate every application’s age rating, safety practices, messaging functions, data collection, and history of exploitation—or should the companies distributing and profiting from those applications carry defined legal responsibilities as well?

Florida did not resolve that question through SB 1722 in 2026.

Florida considered an AI Bill of Rights twice—and passed neither version

Artificial intelligence adds another layer to this discussion.

AI tools can be used to alter ordinary photographs, create fabricated sexual images, impersonate real people, operate companion chatbots, and intensify the speed and scale at which harmful material is generated or distributed.

During the regular 2026 session, CS/SB 482, the proposed Artificial Intelligence Bill of Rights, included provisions requiring parental consent before a minor could hold an account on certain companion-chatbot platforms. It also included required disclosures to help users understand when they were communicating with a bot rather than a human being.

The Florida Senate passed SB 482 by a vote of 35–2 on March 4, 2026. The bill then went to the House, where it died in Messages when the regular session ended on March 13.

The matter returned during Florida’s April 2026 special session as SB 2-D, another Artificial Intelligence Bill of Rights proposal containing protections involving minors and companion chatbots.

The Senate passed SB 2-D by a vote of 37–1. It was referred to the House Information Technology Budget & Policy Subcommittee and died there on April 29, 2026.

Therefore, as of July 11, 2026:

Florida considered an Artificial Intelligence Bill of Rights twice. Neither proposal became law.

That is not a political opinion. It is the legislative record.

It also illustrates why the public must follow bills beyond headlines and floor votes. A measure may receive overwhelming support in one chamber and still provide no enforceable protection because it never completed the legislative process.

What Florida addressed—and what remains unresolved

Florida’s 2026 legislative record reflects progress in several areas:

The state adopted more accurate terminology.

It increased criminal penalties.

It addressed generated and transmitted CSAM.

It recognized that artificial intelligence, companion chatbots, app stores, age verification, and parental consent deserve legislative attention.

But meaningful gaps remain.

Florida did not enact the proposed app-store accountability requirements.

Florida did not enact either version of the Artificial Intelligence Bill of Rights.

And the laws that did pass primarily strengthen the criminal response once illegal conduct has occurred.

This is why the public conversation cannot be reduced to, “Parents should monitor their children.”

Of course parents should remain involved.

But parents cannot rewrite an algorithm.

They cannot independently audit a platform’s moderation system.

They cannot verify whether every reported offender was removed.

They cannot determine whether an age-gating process is easily bypassed.

They cannot control whether a platform introduces new messaging, image-sharing, livestreaming, virtual-gift, or recommendation features.

They cannot investigate international criminal networks operating through hundreds of false accounts.

And they should not be treated as the only responsible party when an adult deliberately deceives and exploits a child.

Platform accountability and parental responsibility are not opposites

This does not require an anti-technology position.

It does not require banning every application.

It does not require pretending that every young person using TikTok is being exploited.

It requires a more mature analysis.

Parents have responsibilities.

Children and teenagers need age-appropriate education.

Schools and healthcare professionals need to recognize warning signs.

Law enforcement needs workable statutes and investigative resources.

Technology companies need to design, test, enforce, and continuously reassess safety systems.

App stores need accurate age ratings and meaningful parental controls.

Legislators need to understand that technology evolves faster than a traditional legislative calendar.

These obligations can exist simultaneously.

Policy is not a substitute for parenting. Parenting is not a substitute for safety-by-design.

What families and professionals should recognize

Possible warning signs do not prove that exploitation is occurring. They should prompt calm, supportive inquiry rather than immediate accusation.

Concerns may include:

• A sudden relationship with an unknown or reportedly older person
• An online contact who claims to be the same age but avoids verification
• Requests to move quickly to another messaging platform
• Unexplained gifts, gift cards, money, game credits, or cryptocurrency
• Multiple secret accounts or abrupt changes in usernames
• Panic when a phone notification appears
• Sudden deletion of accounts or messages
• Threats involving images, school, friends, teammates, or family
• Requests for images followed by demands for more images or money
• Statements such as “My life is over,” “Everyone is going to find out,” or “I cannot tell you what happened”

The most important first response is not punishment.

It is:

You are not in trouble. I believe you. We are going to deal with this together.

The FBI warns that offenders rely on fear, shame, and the child’s belief that adults will punish or blame them. Keeping communication open can interrupt the offender’s control.

What to do when sextortion or exploitation is suspected

When a child or teenager discloses online exploitation:

1. Respond calmly and do not blame the child. The offender is responsible for the coercion and exploitation.
2. Do not send additional images or money. Paying or complying rarely ends the blackmail and may lead to additional demands.
3. Preserve the evidence. Save usernames, profiles, messages, payment requests, phone numbers, and relevant screenshots. Do not delete the account or conversation before preserving information that may assist investigators.
4. Report and block the offender. Use the platform’s reporting function and prevent additional contact after evidence has been preserved.
5. Contact law enforcement. Immediate danger should be reported to 911. Online exploitation may also be reported to the FBI through a local field office or 1-800-CALL-FBI.
6. Report to NCMEC’s CyberTipline. NCMEC accepts reports involving online enticement, sextortion, CSAM, trafficking, and other forms of child sexual exploitation.
7. Use Take It Down when appropriate. NCMEC’s free service can help participating platforms detect and remove nude or sexually explicit images taken before a person turned 18. The image itself does not have to be uploaded to NCMEC; the service creates a digital fingerprint on the person’s device.

The ECVS position

Emerald Coast Victim Services does not share this information to create panic.

We share it because prevention requires more than reacting after a child has already been harmed.

We can educate families without blaming them.

We can recognize platform safety efforts without treating corporate assurances as the final word.

We can support stronger criminal penalties while acknowledging that prosecution occurs after conduct has already taken place.

We can discuss age verification and parental controls while still evaluating privacy and constitutional concerns.

And we can follow legislation carefully enough to distinguish between a bill that was introduced, a bill that passed one chamber, and a bill that actually became law.

Online exploitation is not merely a technology problem.

It is not merely a parenting problem.

It is not merely a criminal-justice problem.

It is a public-health, child-safety, technology, corporate-accountability, and policy problem.

Addressing it requires all of those systems to stop pointing at one another—and begin accepting their part of the responsibility.

ECVS will continue monitoring the harm, the proposed solutions, and the legislative record. Because protecting children requires more than telling families to watch their phones. It requires building systems that make children harder to reach, harder to isolate, and harder to exploit.

This article is provided for public education and does not constitute legal advice. Legislative information is current as of July 11, 2026.