The UK's communications regulator, Ofcom, opened a formal investigation into Meta on 6 October 2026 over the launch of Instagram's Instants feature. The investigation will examine whether Meta completed the risk assessments required by the UK's Online Safety Act 2023 before introducing the feature in May. Ofcom's official case notice makes clear that the regulator has not yet reached a conclusion about whether Meta breached the law.

That distinction matters. An investigation is not a finding of wrongdoing, and the case should not be presented as proof that Instagram launched Instants unlawfully. Instead, the inquiry will test whether the company's assessment of the feature's potential risks was suitable and sufficient under the applicable legal duties.

What Is Instagram Instants?

Meta introduced Instants in May 2026 as a way for Instagram users to share photos captured directly in the app with Close Friends or mutual followers. According to Meta's product announcement, shared content disappears after it has been viewed and is no longer available to recipients after 24 hours. Meta also describes controls such as blocking, muting and restricting accounts, alongside protections associated with Teen Accounts.

These features shape how the product works, but they do not, by themselves, establish that every relevant safety risk has been addressed. Disappearing content can still be used to send harmful material, pressure another person, or contact a child inappropriately. The central regulatory question is whether the risks associated with this particular design were properly identified and mitigated before release.

What Is Ofcom Investigating?

Ofcom's investigation focuses on two duties under the Online Safety Act 2023: section 9(4), concerning illegal-content risk assessments, and section 11(4), concerning children's risk assessments. The regulator says services must conduct further assessments before making significant changes to their design or operation.

In practical terms, the inquiry is about the quality and timing of Meta's risk-assessment process. It is not a general ruling that every disappearing-message feature is unsafe, nor does the announcement mean that the regulator must approve every product before it can launch. The legal question is whether the company met its assessment and mitigation obligations for a significant product change.

Ofcom says it will gather and analyse evidence before determining whether a compliance failure occurred. If it finds a breach, its published enforcement powers include requiring corrective steps and imposing a fine of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater. These are potential consequences, not a penalty already imposed on Meta.

Meta's Response and the Importance of Due Process

Meta has said it conducted a risk analysis and briefed Ofcom about Instants before launch. The company has also pointed to protections built into the feature and said it would cooperate with the investigation, according to reporting by Reuters.

The regulator's task is therefore not simply to determine whether Meta carried out any assessment. It must examine whether the assessment was sufficiently thorough, addressed the relevant risks and informed decisions before the feature went live. The published investigation notice does not disclose the full underlying evidence, so conclusions about the adequacy of Meta's internal process would be premature.

Why Disappearing Content Still Requires Safety Controls

A disappearing-message design may create a sense of informality or privacy, but temporary availability is not the same as guaranteed confidentiality. Recipients may still act on what they see, and content may be described to others or captured through means outside a platform's intended controls. Safety analysis should therefore consider behaviour around the feature, not just its technical specifications.

A useful pre-launch review would examine at least four areas:

• Contact and access: Who can send content to whom? Are the audience settings understandable, and can unwanted contact be limited effectively?
• Child protection: How might minors encounter harassment, coercion, sexual exploitation or other harmful material? Do age-appropriate protections work in realistic scenarios?
• Reporting and response: Can users report abuse involving ephemeral content, and does the platform have a workable process for investigating reports when content is no longer visible to the recipient?
• Testing and monitoring: Were foreseeable misuse scenarios tested before launch? What indicators would trigger a product change, additional safeguards or a pause in rollout?

These are analytical criteria for evaluating a safety process, not claims that Instants lacks each of these protections. Publicly available product descriptions and the opening of an investigation are not enough to establish the details of Meta's internal controls.

The Wider Governance Issue: Safety Must Shape Product Design

The case highlights a difficult balance in platform governance. Companies need room to innovate, but a rapid release cycle should not prevent them from evaluating foreseeable harm. Effective safety-by-design requires product, engineering, legal and trust-and-safety teams to work together before launch, with a documented process for addressing risks that cannot be eliminated entirely.

The most meaningful measure of such a process is not the existence of a risk-assessment document alone. Decision-makers should be able to show how identified risks influenced the product's design, audience controls, reporting mechanisms and launch conditions. Post-launch monitoring is also important because real-world use can reveal problems that pre-release testing did not anticipate.

Regulators, meanwhile, need to explain their findings clearly and distinguish procedural failures from evidence of actual harm. Transparent reasoning helps companies understand what compliance requires and helps the public assess whether enforcement is proportionate.

What Happens Next?

Ofcom's investigation remains open. The next significant development will be evidence-based findings about whether Meta met its legal obligations when it launched Instants. Until the regulator publishes a conclusion, claims that Meta has already been found in breach—or that a fine or ban is inevitable—would go beyond the available evidence.

Editorial Assessment

The Instants investigation is important not because it proves that disappearing content is inherently unsafe, but because it tests whether a platform has assessed the risks of a significant design change before releasing it. The distinction between a product's advertised safeguards and a demonstrably adequate risk-assessment process is central to the case.

A credible outcome should rest on evidence: what risks were identified, what mitigations were considered, how those decisions affected the launch, and whether the process met the law's requirements. That is a more useful standard than assuming either that a major platform has failed or that the presence of safety features is sufficient.

Sources and References

1. Ofcom. "Investigation into Meta Platforms Inc.'s compliance with illegal content risk assessment duties." Published 6 October 2026. Read the official investigation notice.
2. Ofcom. "Ofcom investigates Meta's compliance with UK online safety laws." Published 6 October 2026. Read the regulator's explanation.
3. Meta Newsroom. "Introducing Instants: A New Way to Share in the Moment." Published May 2026. Read Meta's product announcement.
4. Reuters. "UK probes Meta over safety risks of Instagram Instants feature." Published 6 October 2026. Read the Reuters report.

Reporting note: This article distinguishes the regulator's stated concerns, Meta's reported response and the author's analysis. The investigation's opening is not a final finding of legal non-compliance.