Enforcing jurisdiction
Netherlands · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

TikTok – €750,000 Fine (Netherlands, 2021)

€750,000Autoriteit Persoonsgegevens9 April 2021Netherlands
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

TikTok was fined for not providing its Privacy Policy in Dutch for young users. The Dutch DPA found that the policy was only available in English for over two years, which is not acceptable. This ruling highlights the need for companies to communicate clearly with all users, especially children.

What happened

TikTok provided its Privacy Policy only in English to Dutch users, including children, for a significant period.

Who was affected

Dutch children under 16 who used the TikTok app were affected by the lack of accessible information.

What the authority found

The Dutch DPA ruled that TikTok violated GDPR by failing to provide information in a language understandable to its young users.

Why this matters

This case emphasizes the importance of clear communication in data protection. Companies must ensure that their privacy information is accessible to all users, particularly minors.

Recorded legal citations
Automatically processed
Art. 12(1) GDPR
Art. 14(3) GDPR
Art. 58(2) GDPR
Art. 83(2) GDPR
Art. 83(5) GDPR
View original scraped data
Art. 12(1) GDPR
Art. 14(3) GDPR
Art. 58(2) GDPR
Art. 83(2) GDPR
Art. 83(5) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Beleidsregels bestuurlijke boetes 2019

Source checks

Linked-source text retrieved.

Review needed — 10 March 2026.

Processing notes: articles corrected, national law identified, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Dutch DPA (Autoriteit Persoonsgegevens, 'AP'), launched an ex officio investigation into the processing of personal data by TikTok Inc (TikTok), which is based in California, USA. TikTok operates the TikTok app, which allows users to create, edit, and share short videos online. TikTok processes a large amount of personal data via the app, including: User ID, name/nickname, user settings, user generated content (e.g. videos, messages, contents), IP address, mobile carrier, time zone settings, App version, device model, device system, network type, device ID, screen resolution, operating system, and appID. A large group of Dutch children under the age of 16 use the TikTok app, some of whom are around 12 years old. When a user creates a TikTok account, they are informed in Dutch that they are agreeing to TikTok's Privacy Policy. However, the AP's investigation revealed that between 25 May 2018, and 28 July 2020, TikTok provided its Privacy Policy to Dutch users - including children - only in English. This was true both during the registration process, as well as when a user is logged in and wants to consult the Privacy Policy in the TikTok app. Since 29 July 2020, TikTok has provided its Privacy Policy to Dutch data subjects in Dutch. It also provides a separate document that is appropriate for Dutch speaking children in terms of language and form. The AP found that TikTok Inc. infringed Article 12(1) GDPR during the period from 25 May 2018 to 28 July 2020, by only providing its Privacy Policy to Dutch children in English. Article 12(1) GDPR provides that the controller shall take appropriate measures to provide any information relating to the processing of personal data to data subject's in a concise, transparent, and intelligible and easily accessible form, using clear and plain language, in particular for information addressed specifically to a child. Under the WP29's Guidelines on Transparency, TikTok is required to know its intended audience and ide

Related Enforcement Actions (0)

No other enforcement actions found for TikTok in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

9 April 2021

Authority

Autoriteit Persoonsgegevens

Fine Amount

€750,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. TikTok - Netherlands (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: