Possible breaches include failing to implement sufficient measures to prevent new under-16 accounts from being created.