On 15 September 2023, the Irish Data Protection Commission (DPC) issued a decision notice against TikTok Technology Limited (TikTok), including a fine of €345m in relation to the following infringements:
- Children’s profiles were set to public by default meaning anyone could view content posted.
- The family pairing setting allowed an adult (not necessarily a family member) to pair with a child’s account and send direct messages to the child.
- Transparency information provided to children was insufficient.
- TikTok implemented “dark patterns” which nudged users to choose more privacy intrusive settings.
TikTok was given three months to bring their processing into compliance.
A link to the decision can be found here.