Home / Issues / Irish Data Protection Commission finding against TikTok over processing of child users' data under the GDPR
Irish Data Protection Commission finding against TikTok over processing of child users' data under the GDPR
Decidedas of 31 Oct 2026Ireland / European UnionTikTok Technology Limiteddraft
Current status
Confirmed fact · as of 15 Sep 2023
The DPC adopted a binding decision (1 September 2023, announced 15 September 2023) finding GDPR infringements regarding child users' data and imposing EUR 345 million in fines, a reprimand and a three-month compliance order.
A Data Protection Commission (Ireland), Irish Data Protection Commission announces €345 million fine of TikTok (15 Sep 2023) · retrieved 31 Oct 2026
Confirmed fact · as of 31 Oct 2026
This is a data-protection regulatory decision under the GDPR, not a criminal conviction. The findings relate to settings and features as they were in 2020.
A Data Protection Commission (Ireland), Irish Data Protection Commission announces €345 million fine of TikTok (15 Sep 2023) · retrieved 31 Oct 2026 · C The Irish Times (Arthur Beesley), TikTok fined €345m by Ireland's data regulator for violating children's privacy (15 Sep 2023) · retrieved 31 Oct 2026
Unanswered question · as of 31 Oct 2026
TikTok indicated it was evaluating next steps, including a possible appeal; the current status and outcome of any appeal, and completion of the ordered remedial measures, could not be confirmed from the primary records reviewed for this entry.
C The Irish Times (Arthur Beesley), TikTok fined €345m by Ireland's data regulator for violating children's privacy (15 Sep 2023) · retrieved 31 Oct 2026
Last reviewed 31 Oct 2026. An initial allegation is not the final event; this block is always shown.
How it unfolded
Issue raised · 15 Sep 2023
Proposition: The Irish Data Protection Commission examined TikTok's processing of child users' personal data between 31 July and 31 December 2020, including public-by-default account settings, the 'Family Pairing' feature, age-verification measures and transparency provided to child users.
Affected parties: TikTok Technology Limited, Data Protection Commission (Ireland), Child users of TikTok
Originating record: A Data Protection Commission (Ireland), Irish Data Protection Commission announces €345 million fine of TikTok (15 Sep 2023) · retrieved 31 Oct 2026
Response · TikTok Technology Limited · 15 Sep 2023
Attributed claim · as of 15 Sep 2023
TikTok said it 'respectfully disagree[d] with the decision, particularly the level of the fine imposed', and that it was 'evaluating our next steps'. It said the regulator's criticisms concerned features and settings from the 2020 investigation period that it had since changed, including setting under-16 accounts to private by default. — TikTok Technology Limited
C The Irish Times (Arthur Beesley), TikTok fined €345m by Ireland's data regulator for violating children's privacy (15 Sep 2023) · retrieved 31 Oct 2026
Outcome · Data Protection Commission (Ireland), following a binding decision of the European Data Protection Board under Article 65 GDPR · 1 Sep 2023
official findingbinding
Confirmed fact · as of 15 Sep 2023
In a decision adopted on 1 September 2023 and announced on 15 September 2023, the Data Protection Commission recorded findings of infringement of several GDPR provisions (including Articles 5(1)(a), 5(1)(c), 5(1)(f), 24(1), 25(1), 25(2), 12(1) and 13(1)(e)) concerning TikTok's processing of child users' data in 2020. It imposed administrative fines totalling EUR 345 million, a reprimand and an order to bring processing into compliance within three months. Following objections from concerned supervisory authorities, the European Data Protection Board adopted a binding decision on 2 August 2023 directing the DPC to add a fairness finding under Article 5(1)(a) relating to so-called 'dark patterns' and to extend the compliance order accordingly.
A Data Protection Commission (Ireland), Irish Data Protection Commission announces €345 million fine of TikTok (15 Sep 2023) · retrieved 31 Oct 2026
Remedy: Administrative fines totalling EUR 345 million, a reprimand, and an order requiring TikTok to bring its processing into compliance within three months of notification of the decision.
Appeal/review: pending — On 15 September 2023 TikTok said it respectfully disagreed with the decision and was 'evaluating our next steps', including a possible challenge in the High Court. The outcome of any such appeal could not be confirmed from the primary records reviewed for this entry. C The Irish Times (Arthur Beesley), TikTok fined €345m by Ireland's data regulator for violating children's privacy (15 Sep 2023) · retrieved 31 Oct 2026
How to read this. Allegation, response and outcome are separate, dated records. "Decided/resolved" appears only where a cited outcome supports it. Materially affected parties can request a correction via Corrections & response.