The Dutch Data Protection Authority (DPA) has imposed a fine of € 750,000 on TikTok for violating the privacy of young children. The information provided by TikTok to Dutch users – many of whom are young children – when installing and using the app was in English and thus not readily understandable. By not offering their privacy statement in Dutch, TikTok failed to provide an adequate explanation of how the app collects, processes and uses personal data. This is an infringement of privacy legislation, which is based on the principle that people must always be given a clear idea of what is being done with their personal data.
Many children in the Netherlands have TikTok on their phones. Last year the DPA launched an in-depth investigation of the app because of concerns regarding the privacy of children, who are treated as an especially vulnerable category under the law.
They are less aware of the consequences of their actions, including the implications of sharing personal data on social media. This is why children are given additional protections under the data protection legislation.
Transfer of the TikTok investigation
If a company does not have its headquarters in Europe, any EU member state can engage in oversight with regard to its activities. In the case of companies that do have their headquarters in Europe, this responsibility would fall mainly to the country where the headquarters are located.
Speaking on this subject, the DPA’s Deputy Chair Monique Verdier remarked, 'We are now transferring several results of our investigation to the Irish Data Protection Commission. Initially TikTok did not have its head office in Europe, and we were able to look into this matter from the Netherlands, but in the course of the our investigation, TikTok established operations in Ireland.'
'From that point on, the DPA was only authorised to assess TikTok's privacy statement because the violation itself had already ended. It is now up to Ireland's Data Protection Commission to finish our investigation and issue a final ruling on the other possible violations of privacy investigated by the DPA.'
Measures to stop digital grooming and online bullying
In early October of last year, the DPA submitted a report of the findings of its investigation to TikTok. TikTok then implemented a number of changes to make its app safer for children under the age of 16.
One remaining issue is that children can still pretend to be older by filling in a different age when creating their account. By doing so they put themselves at greater risk.
'With around 3.5 million users in the Netherlands, TikTok is one of the most popular apps right now,' said Ms Verdier.
'It can be fun to make videos together and see what other people make. But there are also people who are on TikTok for the wrong reasons. People who share videos that are meant to be private, who bully users or engage in grooming behaviour. The DPA welcomes the changes TikTok has made.'
More control for parents
Parents now also have more control over their child’s account. They can manage their child's privacy settings through their own account and the 'Family Pairing' feature.
'We're happy that parents can now control the privacy settings of their children's account from their own phone,' said Ms Verdier. 'Despite these changes, we would encourage parents to talk regularly with their children about what they do online. Take an interest in the videos they make and talk with them about the way they and other users respond to each other on TikTok.'
TikTok has lodged an objection to the fine.
The original press release in Dutch is available here
For further information, please contact the Dutch DPA: https://autoriteitpersoonsgegevens.nl/nl
The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA's website or other channels of communication, the news item is only available in English or in the Member State's official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.