Massive €530M GDPR Fine Hits TikTok Over Data Violations

May 3, 2025 

TikTok has been fined a staggering €530 million by European Union regulators for violating the General Data Protection Regulation (GDPR), marking one of the largest penalties ever imposed under the landmark data privacy law.

The fine, announced by the European Data Protection Board (EDPB), follows a lengthy investigation into TikTok’s handling of children’s data and its failure to ensure adequate transparency regarding how user information was collected and processed.

According to regulators, the popular short-video platform failed to provide clear, accessible privacy policies and set default accounts for minors to “public” by default — both considered serious breaches under GDPR. The investigation revealed that TikTok did not do enough to verify users’ ages or ensure parental consent when required.

“This decision sends a clear message to all tech companies operating in Europe: children’s data is not to be exploited, and transparency is not optional,” said Andrea Jelinek, Chair of the EDPB.

TikTok, which is owned by Chinese tech giant ByteDance, has responded by saying it disagrees with the decision and is considering an appeal. In a statement, the company claimed it has “already implemented numerous changes” to enhance user privacy and data protection, especially for underage users.

This fine adds to the growing pressure on global tech companies to comply with strict European privacy standards. TikTok previously faced scrutiny in the UK and the US over similar concerns regarding child safety and data protection.

As GDPR enforcement tightens, experts suggest that other platforms popular with younger audiences may face similar investigations in the near future.