TikTok has been fined €530 million (approximately $600 million) by Ireland’s Data Protection Commissioner (DPC) over inadequate protection of user data and is ordered to suspend data transfers to China unless compliance is achieved within six months. The DPC stated that TikTok, owned by ByteDance, failed to demonstrate that EU users’ personal data, which can be accessed by staff in China, is protected to EU standards. Concerns include potential access by Chinese authorities under local laws that counteract EU privacy standards.
TikTok has contested the ruling, asserting that it has adhered to EU legal frameworks, using standard contractual clauses to control data access. The company plans to appeal the decision, arguing that it overlooks security measures implemented in 2023 that ensure EU user data remains in dedicated data centers in Europe and the U.S. TikTok highlighted that it has never received or provided EU user data to Chinese authorities.
This recent ruling could set a precedent with significant implications for companies operating globally within Europe. The DPC also revealed that TikTok previously denied any storage of EU user data in China but later disclosed that a small amount had been stored there and subsequently deleted. The DPC is reviewing these developments for potential further regulatory action.
This is not the first reprimand for TikTok; it was fined €345 million in 2023 related to violations regarding the processing of children’s personal data. The DPC, which acts as the lead EU regulator for various tech firms due to its location in Ireland, has previously fined other major companies under the General Data Protection Regulation (GDPR), which allows fines up to 4% of global revenue.
Note: The image is for illustrative purposes only and is not the original image associated with the presented article. Due to copyright reasons, we are unable to use the original images. However, you can still enjoy the accurate and up-to-date content and information provided.
