EU finds TikTok violated minor privacy rules, risks 6% revenue fine
The European Commission has identified that TikTok failed to adequately protect minors' privacy under the Digital Services Act, citing issues with public account settings and exposure to predatory behavior. The platform faces potential fines of up to 6% of its annual global revenue if it does not address the regulatory concerns regarding its design and safety features.
Key Takeaways
- Commission found children aged 13-15 can easily switch accounts from private to public, while 16-17 year old accounts are visible to the general public by default.
- Potential penalties for non-compliance include a fine up to 6% of TikTok's total annual global revenue.
- Investigation estimates 7% of children aged 12-15 spend four to five hours daily on the app.
- Regulators flagged the 'For You' feed's algorithmic recommendation of minor-generated content to strangers as a systemic risk.
Why It Matters
The EU's move signals a shift from broad policy oversight to granular enforcement of platform design. By targeting default account settings and friction levels in privacy controls, Brussels is forcing ByteDance to re-engineer core discovery mechanics that drive engagement. For the streaming ecosystem, this establishes a precedent where algorithmic recommendation of user-generated content (UGC) is treated as a liability if the creator is a minor. Industry players must now monitor whether the Commission’s demand for 'privacy by design' extends to other video-first platforms like Instagram or YouTube. Watch for TikTok’s formal response and potential UI changes to minor accounts by Q4 2026.
Additional Context
The European Commission’s scrutiny of TikTok is part of a multi-front enforcement strategy under the Digital Services Act (DSA). In February 2024, Brussels opened its initial formal probe into the platform’s 'addictive design,' specifically citing features like infinite scrolling and autoplay as potential risks to the mental health of minors. Further pressure mounted in August 2024 when the Commission forced the permanent withdrawal of the 'TikTok Lite Rewards' program in France and Spain after determining the company failed to conduct a mandatory risk assessment before launching the point-earning system. Per Reuters in July 2026, this latest child safety finding represents the fourth set of preliminary charges filed against the platform under the DSA in two years. TikTok's regulatory challenges also extend to data residency and localized oversight. According to IndexBox in July 2026, Ireland's High Court recently upheld a €530 million fine against the company for transferring European user data to China in violation of GDPR. This follows a separate €345 million penalty issued in 2023 for failing to protect the data of users under age 13. To mitigate these concerns, TikTok has invested in 'Project Clover,' a €12 billion initiative and data-sovereignty program that involves storing European user information on servers located in Ireland and Norway under third-party auditing. Broadly, the EU is tightening restrictions across the entire social video landscape. In July 2026, France became the first member state to move toward a total social media ban for children under 15, while European Commission tech chief Henna Virkkunen stated that high levels of protection 'should not be an opt-in; it should be the default.' Similar investigations remain active against Meta; the Commission issued preliminary findings in October 2025 alleging that both Meta and TikTok restricted independent researcher access to platform data, which is required under Article 40 of the DSA to monitor systemic risks like misinformation and harmful content.
Read full article at fastcompany.com
Get this in your inbox → Subscribe
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source