The UK ICO fines TikTok £12.7M for failing to protect kids' data, saying the app “should have done better”, down from a £27M fine proposed in September 2022
The ICO estimates that 1.4 million children in the UK were on TikTok in 2020.
Context & Ripple Effects
The penalty closes a UK process that began with a 2019 investigation into TikTok’s treatment of young users and later produced a provisional £27M enforcement proposal. It turns a long-running privacy concern into a final sanction, even at a lower amount.
The case matters because the ICO tied the issue to a large under-13 audience, making age controls and child-data governance a core operating concern for a major consumer platform rather than a peripheral compliance question.
First-order effects
- TikTok faces a £12.7M penalty and an official UK finding that its protections for children’s personal data were inadequate.
- The ruling raises immediate compliance pressure on TikTok’s UK handling of underage accounts and associated personal data.
Second-order effects
- Platforms with substantial youth audiences have a clearer enforcement signal: they need to be able to substantiate age-related safeguards and child-data practices to regulators.
- Age-assurance, account-management, and privacy-control processes become more consequential product and legal priorities for social apps operating in the UK.
Third-order effects
- If enforcement continues, child privacy can become a recurring cost of operating large recommendation-driven platforms, rather than an issue resolved by platform terms alone.
- The case points toward more regulator scrutiny of whether platforms’ stated minimum-age rules work in practice, with the eventual burden likely falling on platform design and governance.
The trend: This is one data point in the shift from voluntary youth-safety policies toward enforceable accountability for how social platforms identify and handle child users.