TikTok GDPR Fine (€345M — Children's Data)
IN-21-2-3
Jurisdiction
Ireland
Date
Sep 15, 2023
Status
Ruling Issued
Source
legaldatahunter
Court
Irish Data Protection Commission
Date Filed
Sep 15, 2023
Date Decided
Sep 15, 2023
Relevance
92%
Summary
Major GDPR enforcement action on children's data protection. Established that platforms must implement privacy-by-default for minor users.
Holding
The Irish DPC fined TikTok €345M for violating children's privacy under GDPR. TikTok's default public profile settings for child users, its 'Family Pairing' feature, and inadequate age verification constituted violations of data protection by design principles.
Key Facts
TikTok set child accounts (13-17) to public by default, failed to implement proper age verification, and its 'Family Pairing' feature did not verify whether the paired adult was actually the child's parent.