Will TikTok’s transfers of personal data to China break EU rules?

Question

Accepted Answer

TikTok's Data Transfers to China Under EU Scrutiny

Ireland's Data Protection Commission (DPC) has initiated two inquiries into TikTok, one of which specifically examines the platform's practices regarding the transfer of personal data to China. This investigation will determine whether TikTok adheres to European Union data protection regulations when transmitting personal data to countries outside the EU bloc. The DPC, serving as TikTok's primary EU data privacy regulator, has the authority to impose significant fines, potentially reaching up to 4 per cent of a company's global revenue.
Inquiry into Personal Data Transfers to China

The second probe launched by the DPC is centred on TikTok's international data transfers, with a particular focus on China. This investigation aims to ascertain the company's compliance with EU data law concerning the movement of personal data to non-EU nations. As TikTok's lead regulator in the EU, the DPC is responsible for overseeing the data privacy practices of numerous global tech companies with a significant presence in Europe.
Scope of EU Data Protection Law

EU data law, particularly the General Data Protection Regulation (GDPR) enacted in 2018, imposes strict requirements on how personal data can be processed and transferred. When personal data is transferred outside the EU, companies must ensure that the recipient country offers an adequate level of data protection, or implement specific safeguards such as standard contractual clauses or binding corporate rules. Failure to meet these requirements can be considered a breach of EU data law, potentially leading to substantial penalties.
Potential Fines and Regulatory Oversight

The DPC has a history of imposing significant fines for data protection breaches. Earlier in the month, the Irish watchdog levied a record €225 million fine on WhatsApp, a subsidiary of Meta Platforms, under the GDPR. This regulatory power underscores the seriousness with which the EU treats data privacy and the potential consequences for non-compliance. Despite these actions, the DPC has faced criticism from other European regulators regarding the pace of its inquiries and the severity of its sanctions, highlighting the ongoing challenges in enforcing data protection across the bloc.

Reading history

Hide →

This history is cleared when the page is closed.

Will TikTok’s transfers of personal data to China break EU rules?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends