Social media firm TikTok could face a £27 million fine under UK data protection laws for failing to protect children's privacy on its platform.
The Information Commissioner's Office (ICO) has issued a notice of intent to TikTok and TikTok Information Technologies UK, following an investigation into the company's practices.
The notice - which is a legal document that precedes a potential fine - explains the ICO's provisional view that TikTok breached UK data protection law between May 2018 and July 2020.
It alleges that TikTok processed the data of children who were under the age of 13 without appropriate parental consent and that the company failed to provide proper information to its users in a concise, transparent and easily understandable way. The notice also accuses TikTok of processing special category data, such as personal information revealing ethnic origin or political opinions, without the legal grounds to do so.
"While we respect the ICO's role in safeguarding privacy in the UK, we disagree with the preliminary views expressed and intend to formally respond to the ICO in due course," a TikTok spokesperson said.
It is worth noting here that the Commissioner's findings are provisional and that no conclusions should be drawn at this stage. TikTok, in theory, could walk away without any penalty being imposed and a representative from the company will have the chance to argue its case to the ICO before a final decision is made.
"We all want children to be able to learn and experience the digital world, but with proper data privacy protections," information commissioner, John Edwards, said. "Companies providing digital services have a legal duty to put those protections in place, but our provisional view is that TikTok fell short of meeting that requirement."
RELATED RESOURCE
Cyber resiliency and end-user performance
Reduce risk and deliver greater business success with cyber-resilience capabilities
Edwards added that the regulator's work to better protect children online involves working with organisations, such as TikTok, but that it will also involve enforcement action "where necessary".
In addition to this, Edwards said the ICO was currently looking into how over 50 different online services are conforming with the Children's code. He also revealed that the watchdog has six ongoing investigations looking into companies providing digital services. What's more, in its initial view, Edwards added that these companies hadn't taken their responsibilities around child safety seriously enough. Which suggests more notices could be coming.
-
Bigger salaries, more burnout: Is the CISO role in crisis?In-depth CISOs are more stressed than ever before – but why is this and what can be done?
-
Cheap cyber crime kits can be bought on the dark web for less than $25News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
-
ICO admits it's too slow dealing with complaints – so it's eying up automation to cut staff workloadsNews The UK's data protection authority has apologized for being slow to respond to data protection complaints, saying it's been overwhelmed by increased workloads.
-
“Limited resources” scupper ICO probe into EasyJet breachNews The decision to drop the probe has been described as “deeply concerning” by security practitioners
-
Surge in workplace monitoring prompts new ICO guidelines on employee privacyNews Detailed guidance on how to implement workplace monitoring could prevent data protection blunders
-
What is AdTech and why is it at the heart of a regulation storm?In-depth The UK data regulator has come under heavy fire for consistently delaying much-needed action, privacy groups say
-
ICO crackdown on AI recruitment part of three-year vision to save businesses £100 millionNews ICO25 outlines a fresh approach that involves releasing learning materials, advice, and a new ICO-moderated discussion forum for businesses
-
Clearview AI fined £7.5m over improper use of UK dataNews Australian facial recognition firm collected 20 billion images from the internet without consent in order to build its database
-
UK data watchdog cut IT spending by £1.2 million during pandemicNews The ICO’s IT budget has been slashed by around 23% since 2019
-
Data for 120 army recruits found on the dark webNews The website, run jointly with Capita, has been offline since mid-March as MoD assesses the scope of the breach
