British data watchdogs are weighing a potential punishment for the Chinese video platform TikTok amid claims it breached UK data protection rules by collecting information on users who are underage. If the concerns are confirmed, the fine could run to around 30 million euros, equivalent to roughly 27 million pounds. The ICO disclosed this on Monday, stating that it has found grounds for suspicion and has written to TikTok Inc and TikTok Information Technologies Limited to seek clarifications before any firm conclusions are drawn.
According to the Information Commissioner’s Office, initial inquiries indicate possible noncompliance by TikTok between May 2018 and July 2020. The issues cited include processing data from children under 13 without proper parental consent, failing to provide users with clear, concise and easily understandable information, and handling sensitive data such as ethnicity, political opinions, or religious beliefs without a solid legal justification or basis.
Officials emphasized that digital service providers have a legal obligation to implement strong protections for younger users. The ICO’s tentative view is that TikTok may not meet these protective standards in the areas identified, though a final determination will require TikTok’s formal response and additional evidence gathering.
Reporting to the Department for Culture, Media and Sport, the ICO confirms that the regulator is also examining six other platforms the agency suspects may fall short on safeguarding children online. The ongoing inquiries reflect a broader focus on child safety in digital spaces and the responsibilities of platform operators to secure user data and provide age-appropriate controls.
Under current UK data protection law, violations can carry penalties of up to 17.5 million pounds or four percent of global annual turnover, whichever amount is higher. The regulatory framework aims to deter unlawful processing, especially where it concerns minors, and to promote transparent practices around data collection, consent, and the handling of special category information. The outcome of this case could influence how similar services manage youth data in the United Kingdom, setting benchmarks for compliance and enforcement in the rapidly evolving digital landscape.