


EU Fines TikTok €530 Million Over GDPR Violations, Orders Data Transfer Suspension
TikTok fined €530 million for inadequate data protection and given six months to comply with EU regulations regarding user data access in China.
Subscribe to unlock this story
We really don't like cutting you off, but you've reached your monthly limit. At just $5/month, subscriptions are how we keep this project going. Start your free 7-day trial today!
Get StartedHave an account? Sign in
Overview
The European Union's Data Protection Commission fined TikTok €530 million for breaching GDPR regulations related to the handling of EU user data transferred to China. The DPC's ruling requires TikTok to comply with EU data protection standards within six months or face a halt in data transfers to China. Concerns include potential access by Chinese authorities to user data, which TikTok claims to have never provided. Despite the fines and ongoing scrutiny, TikTok plans to appeal, asserting that it has implemented robust security measures since 2023, ensuring dedicated storage for EU data.
Report issue

Read both sides in 5 minutes each day
Analysis
- The fine of €530 million reflects serious concerns over TikTok's handling of European user data and compliance with EU data protection standards, with a mandate to suspend data transfers to China if non-compliance persists for six months.
- TikTok's ongoing efforts to enhance data security, including Project Clover, are significant, as they incorporate stringent measures and independent oversight aimed at safeguarding user information in Europe.
- The investigation revealed inaccuracies in TikTok's disclosures about data storage, leading to heightened scrutiny on transparency and adherence to regulatory standards.
Articles (6)
Center (3)
FAQ
TikTok violated GDPR Article 46(1) regarding data transfers to third countries and transparency requirements under the GDPR.
TikTok was ordered to comply with GDPR and suspend non-compliant data transfers to China within six months.
TikTok plans to appeal the decision and claims it has implemented enhanced security measures since 2023, including dedicated EU data storage.
The DPC cited concerns that Chinese anti-terrorism and counter-espionage laws could grant authorities access to EU data, diverging from EU privacy standards.
While the article mentions TikTok's claims about security measures, specific local storage isn't detailed in available sources. However, TikTok announced a €1B datacenter in Finland for EU data storage.
History
- 4M3 articles