The UK’s data protection watchdog has announced investigations into three online platforms over how they use children’s personal data.
Shutterstock.com/TYLim
The Information Commissioner’s Office (ICO) revealed today that it is investigating TikTok over how the video sharing platform uses 13 to 17-year-olds’ personal data in its content recommendation system amid “concerns that social media platforms are serving young people with inappropriate and harmful content”. It is also investigating forum site Reddit and image-sharing site Imgur over their age assurance measures.
The ICO said that its investigations would look into possible breaches of data protection legislation and the children’s code, and it would contact the platforms under investigation before reaching a final decision.
Information Commissioner John Edwards said: “We welcome the technology and innovation that companies like social media bring to the UK and want them to thrive in our economy. But this cannot be at the expense of children’s privacy.”
“In announcing these investigations, we are making it clear to the public what action we are currently taking to ensure children’s information rights are upheld. This is a priority area, and we will provide updates about any further action we decide to take.”
TikTok is currently appealing a €14.5 million fine by the ICO issued in 2023 for unlawfully processing children’s data.
TikTok told Lexology PRO: “We're deeply committed to ensuring a positive experience for young people on TikTok, just like the ICO. Our recommender systems are designed and operate under strict and comprehensive measures that protect the privacy and safety of teens, including industry-leading safety features and robust restrictions on the content allowed in teens' feeds”.
Reddit told Lexology PRO: “We have been working closely with the ICO and it remains our practice and intent to comply with all relevant regulations in the countries where we operate. . . we have plans to roll out changes this year that address updates to UK regulations around age assurance”.
Imgur did not respond to a request for comment.
Professor Sonia Livingstone told Lexology PRO that she welcomed the ICO’s announcement: “Effective regulation of children’s data matters for their privacy, safety, wellbeing and inclusion. The ICO’s prioritisation of children’s privacy is urgent and overdue, especially since mechanisms of complaint and remedy are less accessible to children than adults”.
“However, a whack-a-mole approach, company by company, can never succeed. From risky algorithms, problematic advertising and geolocation-by-default to sharing children’s contacts with strangers and commercial exploitation of children’s data – all such tech practices should be addressed on all relevant platforms now”.
Colette Collins-Walsh, head of UK affairs at children’s privacy rights group 5Rights, told Lexology PRO: “We welcome the ICO’s decision to shine a light on the suspected failures by tech companies to safeguard children’s data, following 5Rights’ calls for greater transparency in the regime. Time and again, we have seen platforms leaving young users exposed to data-hungry systems with little accountability. But protecting children’s data isn’t optional; it’s a necessity”.
“This is a step in the right direction, but it’s not enough. With AI-driven systems and high-risk data processing shaping our children’s everyday lives, the ICO must go further: stronger enforcement of age-appropriate design and further investigations into these new and evolving technologies are essential to ensure children are protected wherever they go online”.
Lexology PRO reported last month that the ICO does not categorise whether complaints to the regulator are made on behalf of children due to its casework management system having no specific markers for children.