Ireland’s Data Protection Commission (DPC) fined TikTok €530 million for violating data rules by sending European user data to China.
TikTok violated GDPR by transferring EEA user data to China and lacking transparency. It was given 6 months to comply with data rules or face suspension of data transfers to China.
The DPC found TikTok violated GDPR by failing to ensure EEA user data transferred to China had protections equal to EU standards. TikTok was ordered to suspend these transfers and comply with GDPR within six months.
TikTok disagrees with the decision, citing its €12 billion Project Clover data protection initiative. In September 2023, the DPC fined TikTok €345 million for violating children's privacy.