Credited from: SCMP
TikTok was fined €530 million ($600 million) by its lead European Union privacy regulator, the Irish Data Protection Commission (DPC), due to violations related to user data protection. The company was accused of improperly transferring personal data of European users to China and failing to ensure that this data was secure from potential access by Chinese authorities under local laws, which differ from EU standards, according to Channel News Asia and Newsweek.
The DPC stated that TikTok did not provide adequate guarantees that personal data would be protected at a level equivalent to that mandated by European laws, particularly the General Data Protection Regulation (GDPR). As a result, TikTok is required to bring its data processing practices into compliance within six months or face further sanctions, reports Le Monde and South China Morning Post.
During the investigation, TikTok admitted that a limited amount of user data had been stored in China, contrary to prior claims. Deputy Commissioner Graham Doyle emphasized that TikTok's personal data transfers violated EU laws, raising concerns about potential access by the Chinese government, as highlighted by New York Times and India Times.
TikTok has disputed the ruling and intends to appeal, asserting that it has never received or provided any data to Chinese authorities. The company contends that it has implemented robust data security measures under its Project Clover initiative, which includes significant investments in European data storage and protection, as noted by Business Insider and AA.
In light of these findings, TikTok may face increased scrutiny and fines in the future, with regulatory authorities considering additional actions as they analyze ongoing compliance with EU data protection standards. The ruling has significant implications not only for TikTok but for how global companies manage cross-border data flows, according to Reuters and Dawn.