TikTok fined £12.7m for child data protection breaches - what the ICO has said
and live on Freeview channel 276
TikTok has been fined £12.7m for failing to protect the privacy of children including using the personal data of children aged under 13 without parental consent.
The UK Information Commissioner’s Office said the Chinese-owned social media platform had not done enough to check who was using its platform. An investigation conducted by the Information Commissioner’s Office (ICO) found the video-sharing app breached data protection law.
Information commissioner John Edwards said: "There are laws in place to make sure our children are as safe in the digital world as they are in the physical world. TikTok did not abide by those laws.
"As a consequence, an estimated one million under 13s were inappropriately granted access to the platform, with TikTok collecting and using their personal data. That means that their data may have been used to track them and profile them, potentially delivering harmful, inappropriate content at their very next scroll.
"TikTok should have known better. TikTok should have done better. Our £12.7m fine reflects the serious impact their failures may have had."
The ICO says the breaches happened between May 2018 and July 2020.
"Our 40,000 strong safety team works around the clock to help keep the platform safe for our community.
"While we disagree with the ICO’s decision, which relates to May 2018 - July 2020, we are pleased that the fine announced today has been reduced to under half the amount proposed last year. We will continue to review the decision and are considering next steps."
The £12.7m fine is one of the largest fines the watchdog has issued. However, it is still half of what the ICO threatened last year. In September, the ICO issued TikTok with a "notice of intent" - a precursor to handing down a potential fine.
The ICO estimates that TikTok allowed up to 1.4 million UK children under 13 to use its platform in 2020, despite its own rules not allowing children that age to create an account.
UK data protection law says that platforms that use personal data when offering information to children under 13 must have parental consent.