Europe

TikTok Fined €530m Over EU Data Privacy Failing

Inspirepreneur Team

May 4, 2025 3:44 PM IST

Category Europe

“

Synopsis

Ireland’s Data Protection Commission (DPC) has fined TikTok €530 million for failing to adequately protect European user data sent to China. The regulator accused TikTok of breaching GDPR, claiming the company did not shield…

Ireland’s Data Protection Commission (DPC) has fined TikTok €530 million for failing to adequately protect European user data sent to China. The regulator accused TikTok of breaching GDPR, claiming the company did not shield EU user data from Chinese authorities. This significant penalty places TikTok’s data privacy measures for EU citizens under global scrutiny.

Why Did TikTok Receive This Fine?

Ireland’s DPC oversees data protection for TikTok across the European Economic Area (EEA), covering all EU member states plus Iceland, Liechtenstein, and Norway. The investigation focused on TikTok’s transfer of personal data outside the EU, particularly to China. According to the DPC, TikTok could not “verify, guarantee and demonstrate” that European user data sent to China would be as protected as EU law demands.

The Data Privacy Findings

• Key issue: TikTok couldn’t confirm that user data transferred to China would not be accessed by Chinese authorities.
• The DPC noted Chinese law, especially anti-terrorism and counterespionage rules, could allow government access to foreign user data and these laws “materially diverge from EU standards.”
• The regulator also discovered that TikTok staff in China could “remotely access” EEA user data.

TikTok EU Data Privacy in the Spotlight

The protection of TikTok’s EU user data has raised concerns among both European and American lawmakers for years. The Chinese state’s potential access to data worries many, as ByteDance, TikTok’s parent company, is based in Beijing.

• The DPC highlighted that TikTok failed to mention in its 2021 privacy statement that user data could be accessed in China.
• TikTok updated this policy in 2022 after the DPC’s probe. The new statement admitted that staff in countries like China could access European data to check technical aspects such as their content algorithms and to manage automated accounts.

Suspension Order and TikTok’s Response

The DPC has ordered TikTok to suspend transfers of EU user data to China unless it brings its processing procedures into compliance within six months.

TikTok, contesting the findings, insisted there was “no finding” that it had shared European user data with Chinese authorities. The company claimed it had never received or acted on a government request for such data. TikTok also said it would appeal the fine, emphasising new protections launched under “Project Clover”, announced in March 2023, to improve EU data privacy.

Data Privacy Laws and the Chinese Context

TikTok EU data privacy concerns come at a time when China’s own laws, such as the 2017 National Intelligence Law, require organisations and citizens to “support, assist and cooperate” with national security efforts. This law increases EU regulators’ suspicions that Chinese authorities could, in theory, request access to European user data.

The Irish regulator’s report noted that TikTok had given “erroneous information” during the inquiry. At first, the company had told the DPC it didn’t store EEA user data in China. However, it admitted in a revised statement that “limited” data may actually be stored there.

The DPC is taking the initial inaccurate information seriously and may pursue further regulatory action. The DPC’s investigation covered TikTok’s practices from September 2021 to May 2023. TikTok must update its data processing to protect EU data to the same standard as within the EU, or it will have to suspend all such data transfers to China.

Source

The Guardian - TikTok fined €530m by Irish regulator

---

Explore more entrepreneurial insights and success stories at Inspirepreneur, your go-to magazine for business innovation and leadership.