The Stripchat lawsuit picture is really several fights at once. Technius Ltd, the Cyprus company that runs the adult livestreaming site, is contesting its designation as a Very Large Online Platform under the EU’s Digital Services Act, challenging a related supervisory fee, and facing a European Commission enforcement case over its failure to keep minors off the site. That last matter is the most serious: preliminary findings of a DSA breach were issued in March 2026, and a final non-compliance decision could bring fines of up to 6% of worldwide annual turnover.
The Minors-Protection Investigation
The European Commission’s investigation into Stripchat’s handling of underage access is the most consequential proceeding against the platform. It began on June 13, 2024 with a formal request for information about the site’s measures to protect minors, address illegal content, and prevent gender-based violence.1Digital Policy Alert. European Commission Investigation Into Stripchat Over Minors Protection On May 27, 2025, the Commission opened formal proceedings, examining whether Stripchat had put appropriate age-verification tools in place and whether it had adequately assessed risks to the mental and physical well-being of minors. Stripchat was investigated alongside Pornhub, XNXX, and XVideos.2European Commission. Commission Opens Investigations to Safeguard Minors From Pornographic Content Under Digital Services Act
On March 26, 2026, the Commission issued preliminary findings that Stripchat had breached the DSA. The Commission concluded that Stripchat’s risk assessment used “non-objective methodologies” that prioritized business concerns such as reputational damage over actual risks to minors. It also found that the platform had misrepresented or ignored meetings with civil society organizations specializing in children’s rights and age assurance. On the mitigation side, the Commission determined that Stripchat’s safeguards were ineffective. The site relied on self-declaration, where users simply clicked to confirm they were old enough to enter, along with page blurring and content warnings that did nothing meaningful to block underage access.3European Commission. Preliminary Findings on Stripchat’s DSA Breaches
The Commission is requiring Stripchat to implement “privacy preserving age verification measures” and has pointed to an EU Age Verification app it is developing as a reference standard. If the preliminary findings are confirmed in a final non-compliance decision, Stripchat could face fines of up to 6% of its total worldwide annual turnover or periodic penalty payments.3European Commission. Preliminary Findings on Stripchat’s DSA Breaches As of June 2026, Stripchat has the right to examine the investigation files and submit a written response. The matter remains under investigation.1Digital Policy Alert. European Commission Investigation Into Stripchat Over Minors Protection
The Very Large Online Platform Designation Fight
In December 2023 the Commission designated Stripchat a Very Large Online Platform under the DSA. That label applies only to platforms with at least 45 million monthly active users in the EU, and it triggers the DSA’s most demanding tier of obligations: systemic risk assessments, enhanced transparency, and data-access mandates. The decision, C(2023) 8844 final, was issued on December 20, 2023.4EUR-Lex. Case T-134/24, Technius v Commission
Technius filed for annulment before the General Court of the EU on February 29, 2024, in Case T-134/24. Its central claim is that the Commission relied on flawed third-party data to estimate the user base, with figures the company says are internally inconsistent and in some cases imply user counts exceeding the entire population of individual EU member states. Technius also argues that the Commission failed to disclose its sources and methodology; that Technius had insufficient time to respond before designation; that the DSA lacks a clear definition of “average monthly active recipients”; that the vague methodology produces arbitrary application of the threshold; and that the resulting obligations are disproportionate because Stripchat does not pose the systemic risks the DSA targets.4EUR-Lex. Case T-134/24, Technius v Commission
The Court of Justice of the European Union held a hearing on November 13, 2025. As of mid-2026, no ruling has issued.5ARTICLE 19. EU Court of Justice: Strengthen Fundamental Rights Obligations of DSA
Withdrawal of VLOP Status and the Supervisory Fee Case
On May 27, 2025, the Commission itself withdrew Stripchat’s VLOP designation after determining that the platform’s EU user base had stayed below the 45 million threshold for over a year. Oversight of Stripchat’s DSA compliance moved from the Commission to Cyprus’s national Digital Services Coordinator.6EUCrim. Overview of the Latest Developments on the DSA The withdrawal did not end the Commission’s enforcement, and the minors-protection formal proceedings opened the same day.
Technius has also filed a separate action, Case T-70/26, against a supervisory fee the Commission imposed under Article 43(3) of the DSA. The fee decision issued on November 26, 2025, and Technius argues it is unlawful because it depends on the same VLOP designation the company is contesting in T-134/24. The amount has not been publicly disclosed. The case was under deliberation before the General Court as of early 2026.7Digital Policy Alert. Lawsuit Over Supervisory Fee Applicable to Stripchat Under Digital Services Act
The Cyprus Data Breach Reprimand
One matter is already resolved. On October 4, 2023, the Cyprus Commissioner for Personal Data Protection issued a formal reprimand against Technius after a complaint about the platform’s handling of a breach affecting more than 64.6 million user accounts.8Floort.net. Stripchat Data Breach
The complaint was filed with the Dutch data protection authority in December 2021 and transferred to Cyprus, where Technius is established. The Commissioner found two GDPR violations. Stripchat violated the data minimization principle by requiring users who submitted data access requests to provide government-issued ID, even though the company had no records against which to verify those IDs and could have confirmed identity by simpler means such as email. It also failed to properly notify affected users of the breach, relying on a blog post rather than direct email.9Cyprus Office of the Commissioner for Personal Data Protection. Decision Regarding Technius Ltd
No monetary fine was imposed. The Commissioner issued a reprimand and ordered Technius to notify all registered users by email, which the company then did. Technius also dropped its practice of requiring government IDs for data access requests. The decision warned that any similar infringement within 12 months would be counted against the company in future proceedings.9Cyprus Office of the Commissioner for Personal Data Protection. Decision Regarding Technius Ltd
Where Things Stand
Stripchat is fighting on three EU fronts. The VLOP designation challenge (T-134/24) was heard in November 2025 and awaits a ruling. The supervisory fee challenge (T-70/26) is under deliberation. The minors-protection investigation is the most exposed: preliminary findings of a DSA breach have already issued, and confirmation would open the door to fines of up to 6% of worldwide annual turnover, along with orders to install real age verification rather than the click-through self-declaration the Commission rejected. Technius has not publicly commented on most of these matters beyond its formal legal filings.