TikTok Under Intense Scrutiny: EU Ramps Up Pressure Over Children's Privacy Breaches

It seems that TikTok just can't catch a break when it comes to safeguarding its youngest users in Europe. The European Commission, acting as the EU's top executive body, has launched a comprehensive investigation into the wildly popular video-sharing app, probing whether it's truly doing enough to protect children's privacy and well-being on its platform. This isn't just a slap on the wrist; we're talking about a formal inquiry under the Digital Services Act (DSA), a powerful piece of legislation designed to hold big tech accountable.

The findings, frankly, are quite concerning. According to Thomas Regnier, a spokesperson for the European Commission, TikTok allegedly failed to adequately protect the privacy rights of its younger demographic. Imagine this: adults could easily view the accounts of minors, potentially exposing children to the ugly realities of cyberbullying, unwanted contact, and even predatory behavior. Furthermore, the Commission highlighted issues with account settings; children aged 13-15 could seemingly switch their accounts from private to public with little effort, and even 'private' accounts belonging to 16 and 17-year-olds were, alarmingly, visible to just about anyone online. Such practices, the Commission asserts, are a clear violation of the EU's robust Digital Services Act.

Now, what's at stake here for TikTok? Well, the company does have an opportunity to defend itself against these findings, which is fair. However, if these allegations of non-compliance are confirmed, TikTok could be facing a truly eye-watering fine – potentially up to 6% of its total global annual revenue. That's a staggering sum for its parent company, Beijing-based ByteDance. For its part, TikTok has stated it will review the findings thoroughly and engage constructively with the Commission, a fairly standard corporate line. It's worth remembering that a massive portion of TikTok's 170 million EU users are children, with studies showing that about 7% of kids aged 12-15 are spending a significant chunk of their day – 4 to 5 hours – scrolling through the app.

But hold on a minute, this isn't TikTok's first rodeo with European regulators concerning children's privacy. Just last year, in September 2023, Ireland's Data Protection Commissioner (DPC) delivered a hefty blow, fining TikTok €345 million. That massive penalty was for breaches of the General Data Protection Regulation (GDPR), stemming from how the platform processed children's personal data between July and December 2020. The DPC's investigation found that, shockingly, children's accounts were set to public by default, meaning anyone could view videos posted by young users. Moreover, features like user comments, 'duet', and 'stitch' were also publicly available by default, creating further, unnecessary risks.

The Irish investigation painted a rather clear, if unsettling, picture: TikTok exposed children aged 13-17 to risks by making their accounts publicly accessible and allowing them to be paired with adults outside their family circles. Even children under 13, who shouldn't have been on the platform in the first place, were exposed to similar dangers due to these public default settings. TikTok was given three months to rectify these breaches, though it's important to note that the DPC didn't find TikTok's age-verification process itself to be in breach of GDPR. With TikTok having opened an office in Dublin in 2020, Ireland, as its lead EU regulator, has been keeping a very close eye on its operations.

In essence, these two significant investigations highlight an ongoing and serious concern across Europe regarding the digital well-being and privacy of children using platforms like TikTok. Regulators are clearly stepping up, sending a strong message that big tech companies must prioritize the safety of their youngest users. The stakes are incredibly high, not just for TikTok's bottom line, but for the future of online safety for children everywhere.