Description

Issued ICO fine against TikTok over minor data processing practices non compliance with UK GDPR

On 4 April 2023, the United Kingdom (UK) Information Commissioner's Office (ICO) concluded its investigation into TikTok's minor data processing practices and issued a fine of GBP 12.7 million. The ICO stated that the company breached the UK General Data Protection Regulation (UK GDPR) between May 2018 and July 2020 by processing the data of children under 13 years old without obtaining consent from their parents or guardian. Furthermore, ICO stated that TikTok failed to provide users with information regarding its data collection and sharing practices. Finally, the ICO noted that TikTok violated the data processing regulations due to its failure to ensure that personal data is processed in accordance with UK GDPR transparency requirements.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2022-09-26
under investigation

On 26 September 2022, the United Kingdom (UK) Information Commissioner's Office (ICO) issued a prov…

2023-04-04
in force

On 4 April 2023, the United Kingdom (UK) Information Commissioner's Office (ICO) concluded its inve…