Back to Cases
technologyTechnology · 2023
TikTok Information Technologies UK Limited
TikTok was fined for processing the personal data of an estimated 1.4 million children under 13 in the UK without appropriate parental consent between May 2018 and July 2020, and for allowing under-13s to create accounts on the platform despite claiming to prevent this. The ICO found TikTok also failed to use children's data in accordance with its own privacy policy and failed to ensure data accuracy. The investigation drew on the ICO's Age Appropriate Design Code (Children's Code), which came into force in September 2021 and sets out standards platforms must meet when processing children's data.
Fine Imposed€14.9M
Authority
ICO-UK
Regulation
UK General Data Protection Regulation + Data Protection Act 2018
Max fineHigher tier: £17.5M or 4% of global annual turnover; standard tier: £8.75M or 2%
Statusactive
Key Takeaways
- Age verification is a substantive technical requirement, not a self-declaration exercise — platforms with significant child audiences must implement effective age checks and default-protective settings to comply with the Children's Code and UK GDPR.