Cybersecurity Policy Report, TikTok Drops Appeal of U.K. Fine Over Unlawful Processing of Children’s Data, (Sep 25, 2026)
By Tony Foley
The United Kingdom’s Information Commissioner’s Office (ICO) said yesterday that TikTok had withdrawn its appeal of a monetary penalty notice (MPN) issued in 2023 for numerous data protection law violations, including its unlawful use of children’s data.
ICO issued the MPN, fining TikTok 12.7 million pounds sterling ($16.8 million), after finding that TikTok allowed up to 1.75 million children under age 13 to use the platform, despite its own rules prohibiting children from creating a TikTok account (CPR, April 4). TikTok appealed the decision to the First-tier Tribunal, but the court upheld the fine, finding that the ICO had the authority to issue the MPN (CPR, July 9, 2025). TikTok subsequently appealed the court’s decision, but the Upper Tribunal dismissed that appeal as well, rejecting the company’s argument that its collection of user data was permitted under a special purposes exemption in U.K. privacy law (CPR, Aug. 9).
In a news release yesterday, ICO explained that TikTok’s decision to drop the appeal came on the heels of the Upper Tribunal’s decision, specifically citing the court’s rejection of the company’s argument that its processing of personal data had been for artistic purposes, which, if true, would have required ICO to obtain prior court approval before issuing a penalty. With the company’s decision to drop its appeal, ICO said the MPN was now final.
ICO added that TikTok also had withdrawn an appeal against the agency’s information notice requesting details from the company about how it processes the information of users between the ages of 13 and 17 in its recommender systems. Such systems are used by social media platforms to profile users and recommend content based on their online activity, which ICO said could lead to unhealthy engagement by children. ICO opened an investigation into this in February 2025, and now that TikTok has dropped its appeal, it can continue.
News: LitigationEnforcement InternationalLegislation DataPrivacy