TikTok is facing a £27 million ($29 million) fine after the U.K.’s Information Commissioner’s Office (ICO) provisionally found that the company breached child data protection laws for a two-year period.

The alleged law breach happened from May 2018 through July 2020, with the ICO noting that the company “may have” processed data of children under the age of 13 without parental consent. Additionally, it said the company may have “failed to provide proper information to its users in a concise, transparent and easily understood way” and “processed special category data, without legal grounds to do so.”