TheVortiq
Inteligencia Artificial

A/B Testing: When the algorithm decides who is at risk

The TikTok case reveals the ethical dangers of using millions of users as test subjects in algorithmic safety experiments.

August 18, 2026 · 4 min read

a blue background with lines and dots

TL;DR: TikTok excluded 15 million users from a critical safety update to perform an A/B test. This decision, which left young people exposed to harmful content, marks a turning point in the ethical regulation of recommendation algorithms.

The ethics of the experiment: Safety or sacrifice?

A/B testing, historically conceived as a technique for conversion rate optimization (CRO) and interface improvement, has transcended its original purpose to become a tool for large-scale behavioral engineering. What began as a method to decide which button color generated more clicks has transformed into an algorithmic deployment system that, in the case of TikTok, has crossed the red line between technical optimization and human experimentation without informed consent. Bloomberg's revelation regarding the maintenance of 15 million users in a control group without a critical safety update is not just an operational failure; it is a crisis of algorithmic governance that calls into question the ethical viability of the growth model of major platforms.

The human cost of optimization: When data outweighs the person

The tragedy of Chase Nasca, a 16-year-old, serves as a devastating case study on the consequences of algorithmic segmentation. While the majority of TikTok users in the U.S. received an update designed to break "toxic content loops"—patterns where the algorithm identifies and amplifies self-harm topics—10% of the user base was relegated to an obsolete model for comparative purposes. For Nasca, this was not a statistical experiment; it was a death sentence. Court documents reveal that, in his final two weeks, 73% of the 7,563 videos recommended to his account revolved around depression, loneliness, and emotional suffering. Most alarmingly, 10% of that content directly violated the platform's own safety policies against suicide and self-harm. This case is a reminder that, in digital product design, the omission of a safeguard is not a neutral state: it is a deliberate action with real consequences.

A technical failure or deliberate design?

The software industry often hides behind "progressive rollout" or canary deployment as a standard engineering practice to ensure system stability. However, when the subject of study is mental health, the frame of reference changes radically. Digital ethics experts argue that platforms have confused "screen time optimization" with "user well-being." The current debate is structured around three fundamental axes:

  • Algorithmic Accountability: Unlike a traditional publisher, platforms argue under Section 230 (in the U.S.) for protection against user-generated content. However, when it is the algorithm that actively selects, personalizes, and pushes harmful material, the distinction between platform and publisher becomes blurred.
  • Transparency and Auditing: The opacity of recommendation models (black boxes) prevents regulators or parents from understanding the magnitude of exposure to risks. Therefore, an external auditing framework is required to audit not only the code, but the success metrics that prioritize engagement over user integrity.
  • The limit of Growth Hacking: Historically, success in Silicon Valley has been measured by retention and session time. This business model, often compared to the psychology of slot machines, has shown that blind optimization of retention metrics can unintentionally incentivize the creation of "echo chambers" of harmful content.

It is essential to understand that A/B testing cannot be a blank check to ignore safety risks in the name of data collection. The idea that the user is a perpetual laboratory subject is a legacy of the Web 2.0 era that must be reviewed under contemporary standards of digital rights.

Consequences for the market and regulation

This incident adds to a growing list of events that are forcing a paradigm shift in tech regulation, similar to what happened with the Cambridge Analytica scandal, which marked a turning point in data privacy. Today, the focus has shifted from privacy to algorithmic safety. Authorities in the European Union, through the Digital Services Act (DSA), are already requiring large platforms to conduct risk assessments on how their recommendation systems affect fundamental rights, including mental health. In the United States, judicial pressure is forcing companies to reveal how their design models contribute to the adolescent mental health crisis. It is likely that, in the short term, we will see a ban or strict limitation on A/B tests involving safety or well-being variables in minor users. Companies that do not adopt a 'Privacy and Safety by Design' approach will face not only costly litigation, but an irreversible loss of public trust, the most valuable asset in today's attention economy.

Keep reading