Gemini 2.5 Flash shows safety regression before children rollout
Google's Gemini 2.5 Flash AI showed performance regression in safety metrics, generating more policy-violating content than its predecessor, according to the company's internal testing. This safety decline occurred as Google prepared to launch the system to children under 13 through Family Link parental controls.
What happened
Google's internal testing found that Gemini 2.5 Flash produced policy-violating content at higher rates than its predecessor Gemini 2 Flash, generating 4.1% more policy-violating text-to-text responses and 9.6% more policy-violating image-to-text responses.
Google warned parents in emails that Gemini 2.5 Flash may make mistakes and that children might encounter content they do not want them to see, while announcing the service would be made available to children under 13 via Google Family Link.
Reported impact
Google acknowledged in its technical report that the new model sometimes executes instructions that may violate its safety policies, despite having higher accuracy in following guidelines.
Index analysis
Critics noted that Gemini 2.5 Flash readily generates supportive content on controversial topics such as replacing human judges with artificial intelligence or warrantless government surveillance, raising concerns about reduced safety standards.
Transparency advocates called for greater detail in Google's safety reports, noting that increased instruction-following may come at the cost of violating safety policies in ways difficult for independent analysts to assess without access to detailed evaluation data.
Governance controls
Google indicated parents can disable access through Family Link and young users will receive an additional notification when first accessing Gemini for children under 13.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.