European regulators hit TikTok with massive $368 million fine for failing to protect children’s data

European authorities have fined Twitter €345 million for breaching GDPR rules on handling personal data of younger users. The Irish Data Protection Commission investigated TikTok’s privacy practices for users aged 13 to 17, finding that the platform defaulted child profiles to public and allowed features like Duet and Stitch without opt-in. Additionally, TikTok allowed child accounts to be linked with adult accounts without proper verification, leading to direct messaging between them. The UK’s Information Commissioner’s Office also fined TikTok for data misuse, highlighting the platform’s failure to prevent children under 13 from accessing inappropriate content. Both European and UK regulators have flagged multiple GDPR violations in TikTok’s privacy practices.