“The responsibility to keep children safe online lies firmly at the door of the companies,” the UK information commissioner said.