TikTok has been fined £12.7m by the UK’s data watchdog for failing to protect the privacy of children.

It estimated TikTok allowed up to 1.4 million UK children aged under 13 to use the platform in 2020.

It said children’s data may have been tracked, profiled, and shown unsuitable content.

TikTok said it had “invested heavily” to stop under-13s accessing the site.

Despite TikTok’s 13-year-old account minimum, the ICO said many could access the site.

It said children’s data may have been tracked, profiled, and shown unsuitable content.

Information Commissioner John Edwards said: “There are laws in place to make sure our children are as safe in the digital world as they are in the physical world. TikTok did not abide by those laws.

“As a consequence, an estimated one million under-13s were inappropriately granted access to the platform, with TikTok collecting and using their data.

“TikTok should have known better. TikTok should have done better. Our £12.7m fine reflects the serious impact their failures may have had.”

Later, he told TikTok had “taken no steps” to obtain parental consent.

“When you sign up you can be targeted for advertising, you can be profiled, your data contributes to an algorithm which feeds content,” he said.

“If you’ve been looking at content that is not appropriate for your age, that can get more and more extreme.

“It can be harmful to people who are too young to fully appreciate the implications and make appropriate choices.”

It is one of the largest fines the ICO has issued.

“Our 40,000-strong safety team works around the clock to help keep the platform safe for our community,” said TikTok.

“While we disagree with the ICO’s decision, which relates to May 2018 – July 2020. We are pleased that the fine announced today has been reduced to under half the amount proposed last year. We will continue to review the decision and are considering the next steps.”

The watchdog had previously issued TikTok with a “notice of intent” – a precursor to handing down a potential fine. At the time saying TikTok could face a £27m fine for these breaches.

Prof Sonia Livingstone, who researches children’s digital rights and experiences at the London School of Economics and Political Science, told it was “great the ICO is taking action”, but feared the fine amount could be “shrugged off as the cost of doing business”.”Let’s hope TikTok reviews its practices thoroughly and make sure that it respects children’s privacy and safety proactively in the future,” she said.

Trouble for TikTok

TikTok is allowed to appeal against the scale of the fine and has 28 days to make representations. If successful, the ICO could reduce the final amount.

From proposing a fine to giving its verdict, the regulator has 16 weeks.

Fines received by the ICO go back to the Treasury.

But there may be further concerns for TikTok as the UK Online Safety Bill, due to be passed in the coming months, requires strict age verification processes by social networks.

It has been suggested firms will be fined for breaches – but a £12.7m fine is a small amount compared to the $80bn (£64bn) revenue reported to have been made by TikTok’s parent company ByteDance, a Chinese tech company, in 2022.

And it comes as the platform is already under global scrutiny over security concerns.

Many Western countries are taking measures against TikTok over fears users’ data will be shared with the Chinese government.

The app has been banned on government devices in Canada, Belgium, Denmark, New Zealand, Taiwan, the UK, the US, and for anyone working at the European Commission.

TikTok boss Shou Zi Chew was grilled in Congress over its safety and tried to reassure lawmakers that users’ data was secure.