September 24, 2025
A recent investigation in Canada has found that TikTok has collected sensitive information from many Canadian children, despite stating that its platform is not intended for users under the age of 13. In response, the company has committed to improving its tools to keep minors off the app and strengthening transparency around how children’s data is used.
Key Findings from the Canadian Investigation
- Conducted jointly by the federal Privacy Commissioner and provincial bodies in Quebec, British Columbia, and Alberta, the investigation discovered that hundreds of thousands of children accessed TikTok annually in Canada even though the platform claims it is not for those under 13.
- The report determined that TikTok had collected “sensitive personal information” from a large number of these children, using that information to target content and advertisements.
- Privacy officials said TikTok’s existing age-assurance measures (ways to verify user age) and its communication about how user data is collected and used are insufficient, particularly for younger users.
What TikTok Has Agreed to Do
In light of the investigation’s findings, TikTok has committed to:
- Enhancing its age-assurance mechanisms to better prevent under-13 users from creating accounts or accessing the platform.
- Limiting advertising: Under the plan, advertisers will no longer be able to target users under 18 based on detailed personal profile data, except in broad categories like general location or language.
- Improving communication and transparency: TikTok will provide clearer information to users — especially minors — about what personal data is collected and how it is used to deliver content and ads.
TikTok noted that while it did not agree with all of the findings, it welcomed many of the proposed changes and said it would implement them for Canadian users.
Broader Implications: Why This Matters
- Data Privacy for Children
Protecting children’s personal data is a growing concern globally. Young users are often less aware of how digital platforms collect, store, and use their information — which includes things like location, device details, usage patterns, and sometimes more sensitive data. Misuse or over-collection can lead to unwanted targeting and exposure to harmful content or manipulative marketing. - Regulatory Pressure Increasing Worldwide
The Canadian investigation is part of a broader scrutiny of TikTok in many jurisdictions. Governments in the U.S., the EU, and elsewhere have raised concerns about the platform’s privacy practices, data storage, and potential foreign influence or security risks given its ownership by ByteDance, a Chinese company. - Precedent for Other Countries, Including Sri Lanka
Countries around the world may look to Canada’s findings when considering or updating their own digital privacy laws, especially those governing minors. Sri Lanka could similarly benefit from clear legislation, enforcement mechanisms, or guidelines that protect children on digital platforms.
What to Watch Going Forward
- Implementation & Enforcement: It’s one thing for TikTok to promise changes; it’s another to see how effectively these changes are implemented and monitored. Privacy authorities in Canada will likely follow up to ensure TikTok is meeting its commitments.
- User Awareness: How much of this change depends also on how well users (or parents/guardians) understand the privacy practices of social media platforms. Clarity in communication will be crucial.
- Tech Solutions & Age Verification: Age verification is notoriously difficult online. Methods such as document verification, third-party verification, AI-based risk scoring all have trade-offs — from privacy risks themselves to exclusion of users without required documents.
- Local Responses: Countries in Asia and elsewhere may impose stricter rules, fines, or require local data storage for children’s data. Platforms operating in multiple countries will likely have to adapt to a patchwork of regulations.
What This Means for Sri Lankan Users & Regulators
While the Canadian case is geographically distant, some of its issues are quite relevant to Sri Lanka:
- Many Sri Lankan youths use social media and apps like TikTok, often with minimal oversight or parental awareness. Ensuring that apps clearly explain what data are being collected and how they are used is important for protecting users here.
- Regulators in Sri Lanka might look into whether current data protection laws sufficiently cover minors, consent, and transparency. The Personal Data Protection Bill, or similar legislation, might need to explicitly address age-appropriate standards.
- Educators, parents, and civil society have a role to play in raising awareness among youth about digital safety, privacy, and the kinds of permissions and access these apps request.
Conclusion
The Canadian investigation into TikTok highlights major gaps in how social media platforms handle children’s access and data privacy. While TikTok has agreed to some reforms — especially around age verification, transparency, and advertising restrictions — the real test will be in how well these changes are enforced.
For countries like Sri Lanka, whose young population is increasingly digitally connected, this serves as a warning: more protection, clearer rules, and better user education are needed to ensure that children can benefit from technology without being exposed to unregulated risk.
