Type to search

TikTok Hit With $370m EU Fine Over Children’s Data Breaches

TikTok said it disagreed with the decision and the size of the fine – and that it had addressed most of the regulator’s concerns before it launched its probe

TikTok app logo is seen in this illustration
(Reuters image from 2022).


Chinese video-sharing platform TikTok has been fined $370 million over its handling of children’s personal data in the European Union.

The bloc’s lead regulator said on Friday that the tech giant had breached privacy laws regarding the processing of the data.

The Chinese-owned short-video platform, which has grown rapidly among teenagers around the world in recent years, broke a number of EU privacy laws between July 31, 2020, and December 31, 2020, Ireland’s Data Protection Commissioner (DPC) said in a statement.


Also on AF: SoftBank’s Arm Nets $65bn Valuation in Blockbuster Nasdaq Debut


It is the first time ByteDance-owned TikTok has been reprimanded by the DPC, the lead regulator in the EU for many of the world’s top tech firms due to the location of their regional headquarters in Ireland.

A spokesperson for TikTok said it disagreed with the decision, particularly the size of the fine, and that most of the criticisms are no longer relevant as a result of measures it introduced before the DPC’s probe began in September 2021.

The DPC said TikTok’s breaches included how in 2020 accounts for users under the age of 16 were set to “public” by default and that TikTok did not verify whether a user was actually a child user’s parent or guardian when linked through the “family pairing” feature.

TikTok added tougher parental controls to family pairing in November 2020 and changed the default setting for all registered users under the age of 16 to “private” in January 2021.

TikTok said on Friday it plans to further update its privacy materials to make the differences between public and private accounts clearer and that a private account will be pre-selected for new 16-17-year-old users when they register for the app from later this month.


EU’s Second Investigation

The DPC gave TikTok three months to bring all its processing into compliance where infringements were found.

It has a second probe open into the transferring by TikTok of personal data to China and whether it complies with EU data law when moving personal data to countries outside the bloc. In March the DPC said it was preparing a preliminary draft decision into that investigation.

Under the EU’s General Data Protection Regulation (GDPR), introduced in 2018, the lead regulator for any given company can impose fines of up to 4% of the company’s global revenue.

The DPC has hit other tech giants with big fines, including a combined 2.5 billion euros levied on Meta.

It had 22 inquiries open into multinationals based in Ireland at the end of 2022.


  • Reuters with additional editing by Sean O’Meara


Read more:

TikTok’s $1.3bn EU Data Centres Plan to Dodge Bans – Wired

TikTok to Spend Billions in Southeast Asia, Focus on E-Commerce

China’s TikTok Sues Montana Over Statewide Ban

TikTok Staff Spied on UK Journo Through Her Cat’s Account – BBC




Sean O'Meara

Sean O'Meara is an Editor at Asia Financial. He has been a newspaper man for more than 30 years, working at local, regional and national titles in the UK as a writer, sub-editor, page designer and print editor. A football, cricket and rugby fan, he has a particular interest in sports finance.


AF China Bond