UK's ICO could fine TikTok £27,000,000

The UK’s Data Protection Authority (The ICO - Information Commissioners Office) have put out a statement that states;

'TikTok could face a £27 million fine after an ICO investigation found that the company may have breached UK data protection law, failing to protect children’s privacy when using the TikTok platform.

The ICO has issued TikTok Inc and TikTok Information Technologies UK Limited (‘TikTok’) with a ‘notice of intent’ - a legal document that precedes a potential fine.

The notice sets out the ICO’s provisional view that TikTok breached UK data protection law between May 2018 and July 2020.

  • The ICO investigation found the company may have:

  • processed the data of children under the age of 13 without appropriate parental consent,

  • failed to provide proper information to its users in a concise, transparent and easily understood way, and

  • processed special category data*, without legal grounds to do so.

The Commissioner’s findings in the notice are provisional. No conclusion should be drawn at this stage that there has, in fact, been any breach of data protection law or that a financial penalty will ultimately be imposed. We will carefully consider any representations from TikTok before taking a final decision.’

Source - ICO could impose multi-million pound fine on TikTok for failing to protect children’s privacy | ICO

*Special category data includes: ethnic and racial origin, political opinions, religious beliefs, sexual orientation, Trade union membership, genetic and biometric data or health data.