TikTok — Enforcement

moderateAnti-PrivacyJun 2, 2021 → Jul 22, 2021Enforcement

Executive Summary

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) fined TikTok €750,000 for providing its privacy policy only in English, making it inaccessible to young Dutch users who did not speak the language. The DPA found that TikTok violated GDPR transparency requirements by failing to provide privacy information in Dutch, particularly given the app's large base of child users in the Netherlands.

Post LinkedIn Reddit Email

children-privacy transparency eu-compliance enforcement

What Happened

On July 22, 2021, the Dutch Data Protection Authority fined TikTok €750,000 for providing its privacy policy only in English to Dutch users. The regulator found this violated GDPR transparency requirements because many users in the Netherlands are children who could not understand what was being done with their personal data. The investigation was later transferred to Ireland's Data Protection Commission after TikTok established its European headquarters there during the course of the inquiry.

Who Is Affected

This enforcement action directly concerned TikTok's approximately 3.5 million users in the Netherlands, particularly children who are treated as a vulnerable category under privacy law. Young Dutch users who did not speak English were unable to understand how the app collected, processed, and used their personal data. Children are considered especially at risk because they are less aware of the consequences of sharing personal data on social media.

Why It Matters

This case establishes that providing privacy policies only in English is insufficient under GDPR when a service has significant user bases in non-English speaking countries, especially when those users include vulnerable populations like children. The €750,000 fine demonstrates that data protection authorities will enforce transparency requirements even for language accessibility issues. The case also highlights jurisdictional complexities in GDPR enforcement when companies establish European headquarters during ongoing investigations.

What You Should Do

If you are a parent of a child using TikTok in the Netherlands or other non-English speaking countries, review the app's privacy settings with your child to understand what data is being collected and shared. Be aware that children can circumvent age restrictions by entering false birthdates when creating accounts, which may expose them to additional risks. Check whether TikTok now provides privacy information in your local language and take time to read and discuss it with young users in your household.

AI-Assisted

Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.

Sources

Related Events