TikTok has agreed to pay a £12.7 million fine imposed by the UK Information Commissioner’s Office (ICO) over its handling of children’s data, ending a legal dispute that lasted nearly three years. The social media company withdrew its appeal against the penalty, which was initially levied in 2023, although it continues to contest the ICO’s findings.

The ICO determined that between May 2018 and July 2020, TikTok failed to properly verify the ages of users and did not obtain parental consent as required by data protection laws, despite being aware that children under 13 were accessing the platform. The watchdog estimated that as many as 1.75 million children under 13 in the UK used TikTok in 2020, even though the platform’s own rules prohibit underage accounts. Additionally, the ICO found that TikTok did not clearly disclose how it collected, used, and shared user data.

A spokesperson for TikTok emphasized that the issues addressed by the ICO relate to a past period and do not reflect recent changes. “Whilst we disagree with the ICO’s 2023 decision, its findings relate to a historical period, May 2018 - July 2020, and do not reflect the many youth safety measures and policies we have implemented since then,” the spokesperson said.

TikTok had initially challenged the fine, including an argument that its processing of personal data was for artistic purposes, but the Upper Tribunal rejected that claim. The company’s decision to drop the appeal finalizes the fine and closes that chapter of the regulatory dispute.

The withdrawal also clears the way for the ICO to advance a separate investigation concerning TikTok’s use of teenagers’ data, specifically how its recommender system profiles users aged 13 to 17 to tailor the content they see. The ICO initiated this probe in February 2025 over concerns that personalized recommendations might expose children to inappropriate or harmful material and encourage prolonged usage by continuously showing content aligned with their interests.

Previously, TikTok had challenged an ICO information notice demanding details about how the platform processes data through its recommender algorithms, a move that had stalled the investigation. With the company’s appeal now withdrawn, the ICO can resume its inquiry.

The recommender systems at the center of the investigation use user activity data to decide which videos and content are displayed, raising questions about the potential impact on child users’ safety and well-being. The ongoing scrutiny reflects increasing regulatory focus on the practices of social media platforms concerning young audiences.