TikTok Rules in the UK (2026): Online Safety Act, Age Assurance, ICO Fine & Ad Disclosure

The UK polices TikTok through two regulators on overlapping child-safety grounds — the ICO (data protection) and Ofcom (online safety) — plus the ASA for advertising. In 2026, "highly effective age assurance" is a legal duty and TikTok is under an open investigation. Sourced throughout.

TL;DR — key takeaways

• Minimum age 13; the UK data-consent age is also 13 (DPA 2018 s9), the lowest GDPR allows.
• "Highly effective age assurance" is a legal duty since 25 July 2025 (Online Safety Act); self-declaration alone is insufficient.
• TikTok is under an open Ofcom investigation (opened 16 July 2026) over its "age inference" method.
• ICO fined TikTok £12.7M (April 2023) over ~1.4M under-13 children's data.
• Influencer ads must be labelled up-front (e.g. #ad) under the ASA/CAP Code.

Quick reference

Is TikTok legal in the UK?

Yes, with no general ban. TikTok is banned on UK central-government devices (Cabinet Office, 16 March 2023) and some public-sector/parliamentary devices, but is fully available to the public. As of 16 July 2026 it is under a formal Ofcom investigation over its age-assurance methods under the Online Safety Act. (Ofcom investigation)

Minimum age & data-consent age

TikTok's global minimum of 13 applies. Separately, the Data Protection Act 2018 s9 sets the age at which a child can consent to processing by information-society services (like TikTok) at 13 — the lowest GDPR Article 8 permits (default 16). Under-13s' data requires parental consent — exactly what TikTok was fined for breaching. (DPA 2018 s9)

Age assurance under the Online Safety Act

The Online Safety Act 2023 (enacted 26 Oct 2023) imposes statutory duties on user-to-user services to protect children: risk-assessment, "highly effective age assurance", and preventing under-18s from encountering "primary priority" harmful content (pornography, and content promoting suicide, self-harm or eating disorders). Children's-safety and age-assurance duties are enforced from 25 July 2025. Ofcom-accepted "highly effective" methods include facial age estimation, photo-ID matching, credit-card checks, mobile-network age checks, bank confirmation and digital identity services — self-declaration and simple age inference alone are treated as insufficient. Maximum penalty: £18 million or 10% of qualifying worldwide revenue, whichever is greater. The Act replaced the earlier Video-Sharing Platform (VSP) regime. (Online Safety Act 2023, Ofcom – age checks)

The open investigation: Ofcom opened a formal investigation on 16 July 2026 into "serious doubts" about whether TikTok's age-inference methods correctly detect under-18s, with an update expected around October 2026. (Ofcom)

Data protection & the £12.7M fine

• The ICO Children's Code (Age Appropriate Design Code) requires high-privacy-by-default for all under-18s, with geolocation and profiling off by default — broader than TikTok's global "under-16 default private" baseline. (ICO Children's Code)
• On 4 April 2023, the ICO fined TikTok £12.7 million for processing the data of an estimated 1.4 million+ children under 13 without parental consent (May 2018–July 2020), failing to remove known underage users, and lacking transparency. The provisional figure had been £27M. (ICO press release, Stephenson Harwood)

Advertising & influencer rules

• Ads must be "obviously identifiable" and labelled up-front (e.g. #ad) before a user engages — not hidden behind "see more" (ASA/CAP Code). (ASA)
• The ASA's 2024 monitoring report (Influencer Ad Disclosure on Instagram and TikTok, published May 2025) found only ~57% of UK influencer posts were adequately disclosed — an active enforcement focus. (ASA report)
• Category rules apply: the HFSS junk-food ad restriction became legally enforceable on 5 January 2026; FCA financial-promotion rules cover crypto/financial content; gambling, alcohol and medicines rules also apply to TikTok content.

What creators & brands should do

1. Expect real age checks — build for "highly effective age assurance," not self-declaration.
2. Label ads up-front (#ad) so they're obvious before engagement.
3. Treat all under-18s as protected under the ICO Children's Code (not just under-16s).
4. Comply with category rules (HFSS from Jan 2026, FCA for financial promotions).

Frequently asked questions

What is the minimum age to use TikTok in the UK?

1. The UK data-consent age is also 13 (DPA 2018 s9); under-13s' data needs parental consent.

Does the UK require age verification? Since 25 July 2025 the Online Safety Act requires "highly effective age assurance"; self-declaration alone is insufficient, and TikTok's age-inference method is under an open Ofcom investigation.

Was TikTok fined in the UK? Yes — £12.7M by the ICO on 4 April 2023 over ~1.4M under-13 children's data without parental consent.

Do influencers need to label ads? Yes — ads must be "obviously identifiable" and labelled up-front (e.g. #ad) under the ASA/CAP Code.

Accuracy & limitations

Findings are current (through the 16 July 2026 Ofcom investigation) and overwhelmingly primary-sourced (legislation.gov.uk, Ofcom, ICO, ASA). Corrections applied: the ~57% disclosure figure is the ASA's (not Ofcom's), from its 2024 report published May 2025; and the HFSS junk-food ad restriction's enforceable start is 5 January 2026. Some ICO/Ofcom pages returned automated-fetch errors and were corroborated via ASA/legislation and law-firm/news analysis; exact UK GDPR article numbers in the penalty notice and the investigation's final outcome were not confirmed. Reliability: high.

Sources

1. Online Safety Act 2023 (c.50): https://www.legislation.gov.uk/ukpga/2023/50/contents
2. Ofcom – age checks / "highly effective age assurance": https://www.ofcom.org.uk/online-safety/protecting-children/age-checks-helping-make-online-experiences-safer-for-uk-children-but-job-not-done-and-tech-industry-must-act-to-strengthen-protections
3. Ofcom – investigation into TikTok (s12 duty), opened 16 Jul 2026: https://www.ofcom.org.uk/online-safety/protecting-children/investigation-into-tiktoks-compliance-with-duties-to-protect-children-from-encountering-harmful-content-under-section-12
4. ICO – £12.7M TikTok fine (4 Apr 2023): https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2023/04/ico-fines-tiktok-12-7-million-for-misusing-children-s-data/
5. Stephenson Harwood – ICO £12.7M fine analysis: https://www.stephensonharwood.com/insights/spotlight-on-tiktok-ico-fines-tiktok-127-million/
6. ICO – Children's Code (Age Appropriate Design Code): https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/childrens-code-guidance-and-resources/
7. DPA 2018 s9 – data-consent age 13: https://www.legislation.gov.uk/ukpga/2018/12/section/9/enacted
8. ASA – recognising ads on social media: https://www.asa.org.uk/advice-online/recognising-ads-social-media.html
9. ASA – Influencer Ad Disclosure (Instagram & TikTok) 2024 report: https://www.asa.org.uk/news/influencer-ad-disclosure-on-social-media-instagram-and-tiktok-report-2024.html