Technology firms must tackle illegal content on their platforms under new rules, but there are concerns that the changes are too weak.