TikTok Information Technologies UK Limited and TikTok Inc.

ICO (United Kingdom) case tiktok-2023-04, decided 2023-04-04. EUR 14,500,000.

What the regulator decided

Between May 2018 and July 2020, TikTok processed the personal data of up to 1.4 million UK children under 13 who used the platform without parental consent; failed to provide adequate information to users about how their data would be collected, used and shared; and failed to ensure the personal data of UK users was processed lawfully, fairly and in a transparent manner - breaching Articles 5(1)(a), 8 and 12 UK GDPR.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://ico.org.uk/action-weve-taken/enforcement/tiktok-information-technologies-uk-limited-and-tiktok-inc/

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20240619175635/https://ico.org.uk/action-weve-taken/enforcement/tiktok-information-technologies-uk-limited-and-tiktok-inc/

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Native fine GBP 12.7M; EUR figure is the round-trip conversion at the enforcement-date FX rate and is approximate. Cite for the children's- data precedent under UK GDPR, parallel to the DPC's TikTok IN-21-9-7 EU-level enforcement.

Verification trail

Verified by: donal
Verified at: 2026-05-26
Review due: 2026-11-26

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-ico-tiktok-2023-04,
  author       = {{ConsentMark}},
  year         = {2023},
  title        = {ICO (United Kingdom) tiktok-2023-04 - TikTok Information Technologies UK Limited and TikTok Inc.},
  howpublished = {\url{https://www.consentmark.com/precedent/ico-tiktok-2023-04}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2023, April 4). ICO (United Kingdom) tiktok-2023-04 - TikTok Information Technologies UK Limited and TikTok Inc.. Methodology v1.3. https://www.consentmark.com/precedent/ico-tiktok-2023-04

Markdown

[ICO (United Kingdom) tiktok-2023-04 - TikTok Information Technologies UK Limited and TikTok Inc. - ConsentMark](https://www.consentmark.com/precedent/ico-tiktok-2023-04)

Plain text

ICO (United Kingdom) tiktok-2023-04 - TikTok Information Technologies UK Limited and TikTok Inc. - ConsentMark, 2023-04-04, methodology v1.3, https://www.consentmark.com/precedent/ico-tiktok-2023-04