'One of the big problems right now is that, essentially, if some of the big tech platforms comply with a checklist that Ofcom has set out in its codes of practice then they're taken as being compliant'