TikTok Limited

€345,000,000

Non-compliance with general data processing principles

Ngày ra quyết định

1 tháng 9, 2023

Thẩm quyền

Data Protection Authority of Ireland

IE

Ngành

Media, Telecoms and Broadcasting

Quốc gia

IE

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Irish DPA (DPC), has imposed a fine of EUR 345 million on TikTok Limited. The DPC conducted an investigation primarily focused on the processing of personal data between July 31, 2020, and December 31, 2020. During their investigation, the DPC found that the profiles of child users were set to public access by default. As a result, the DPC concluded that TikTok had failed to implement appropriate technical and organizational measures to ensure that only necessary personal data was being processed. Furthermore, the DPC noted that the 'Family Pairing' feature, which allowed non-child users to link their accounts with those of child users, posed a security risk to the personal data of children. Additionally, TikTok failed to provide child users with information about the categories of recipients of their personal data and clear, understandable information on the scope and implications of data processing. The DPC also found that TikTok introduced so-called 'dark patterns,' leading users to frequently opt for less privacy-friendly options during registration and when posting videos on the platform. In addition to the fine, the DPC issued an order requiring TikTok to bring its processing activities in line with the GDPR within three months.

Trích dẫn pháp lý

Art. 5 (1)Art. 12 (1)Art. 13 (1)Art. 24 (1)Art. 25 (1)

Vấn đề & Vi phạm

Non-compliance with general data processing principles

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.