Tech companies risk being compelled by law to protect children, says online safety expert