United Kingdom

TikTok

14,500,000 €

GDPR enforcement action by Information Commissioner (ICO) on 2023-04-04.

Rank · Sector

#26

of 369 in Media, Telecoms and Broadcasting

Rank · United Kingdom

of 28

Rank · All fines

#40

of 3,050

Case details

Authority: Information Commissioner (ICO)
Date: 2023-04-04
Controller / Processor: TikTok
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a) GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The UK DPA (ICO) has fined TikTok EUR 14.5 million. The ICO had found that more than one million British children under the age of 13 were using TikTok without the consent of their parents. The ICO criticized TikTok for failing to implement adequate controls to identify and remove underage children from its platform. Further, the ICO found that TikTok did not provide users of the platform with sufficient and easily understandable information about the collection, use and disclosure of their data.
For this reason, the ICO concluded that TikTok had not ensured that its users' personal data was processed in a lawful, fair and transparent manner.

Open original source Links to the regulator's original publication or another source.