PrivacySignal
Enforcement

TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine

Information Commissioner's Office · · UK · Enforcement

TikTok has dropped two appeals against the UK Information Commissioner's Office and agreed to pay a £12.7 million fine related to a children's privacy enforcement action. The company is no longer contesting the ICO's findings in those proceedings.

Why this matters: TikTok collected data on children, the ICO penalized them for it, and TikTok fought back. Now it has stopped fighting. That matters because enforcement against big platforms tends to fail quietly — fines get appealed, delayed, or reduced until they become a rounding error. Accepting a £12.7 million penalty is not a huge sum for TikTok, but dropping the appeals means the ICO's findings stand. That gives the regulator firmer ground the next time a platform decides children's data is worth the risk.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
M Malwarebytes · · International

Google’s location data privacy failures draw a €403 million fine

Google has been fined €403 million over failures related to how it handled user location data privacy. The penalty reflects regulatory action against one of the world's largest data collectors for not meeting required privacy standards.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
EDPB · · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
The Guardian — Tech · · International

New UK agency to fight ‘information warfare’ from likes of Russia, Burnham tells UN

The UK government is establishing a National Centre for Information Defence to detect and counter foreign disinformation and AI-generated deepfakes, particularly from hostile states such as Russia. The centre will bring together intelligence agencies, law enforcement, and social media companies.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
BBC — Tech · · International

US criticises Australia's proposed algorithm opt-out laws as 'censorship'

Australia is considering laws that would require tech companies to give users the ability to opt out of algorithmic content ranking, with fines for firms that fail to comply. The United States has pushed back on the proposal, framing it as censorship.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai#privacy Read original →