The European Union’s data protection regulator has issued a significant fine of €345 million to Chinese-owned social media platform TikTok for breaching child data protection regulations. The decision was announced by Ireland’s Data Protection Commission (DPC) following a two-year investigation into TikTok’s data handling practices.
The DPC’s investigation revealed multiple violations related to TikTok’s handling of user data, especially among children and adolescents. Key findings included:
Platform Settings: TikTok was found to have inadequate platform settings regarding user data privacy. When minors signed up for TikTok, their accounts were automatically set to public, allowing anyone to view and comment on their videos.
Age Verification Policies: While TikTok did not violate age verification policies for users under 13, the company was criticized for not fully considering the risks associated with younger users joining the platform.
Family Pairing Feature: TikTok’s “family pairing” feature, which links parents’ accounts to those of their teenage children, faced criticism. However, the DPC did not find violations in terms of confirming parental or guardian status.
Read also: US fines Amazon $25m over child privacy violations
GDPR Enforcement
Ireland’s DPC plays a vital role in enforcing the General Data Protection Regulations (GDPR) of the European Union. Given that several major tech companies, including TikTok, Google, Meta, and X (formerly Twitter), have their European headquarters in Dublin, Ireland, the country holds a central position in GDPR enforcement.
TikTok’s Response
TikTok responded to the fine by expressing its disagreement with the ruling. The company stated that it “respectfully disagrees” with the decision and is evaluating its next course of action. TikTok also noted that the DPC’s criticisms were primarily focused on features and settings that were in place three years ago, and the company had made changes well before the investigation began.
UK Fines TikTok £12.7m For Breaching Data Protection Regulation
Impact on Social Media and Data Privacy
The significant fine imposed on TikTok highlights the growing importance of data protection regulations, especially when it comes to safeguarding the privacy of children and adolescents online. As social media platforms continue to attract younger users, regulators are likely to intensify their efforts to ensure compliance with data protection standards.
With over 150 million users in the United States and 134 million in the European Union, TikTok remains extremely popular among young people. The platform, a subsidiary of Chinese internet giant ByteDance, has been under scrutiny for its data handling practices, particularly concerning minors.
This substantial fine not only serves as a financial penalty for TikTok but also sends a strong message to social media platforms and tech companies regarding the protection of user data, especially that of young users. Data privacy and adherence to regulations are becoming paramount issues in the digital age, and companies operating in the EU must take these matters seriously.