EU fines TikTok €530m over ‘illegal’ China data transfer

Chinese-owned social media platform, TikTok has been hit with an EU fine of 530 million euros ($600 million) on Friday for sending personal data of Europeans to China and failing to guarantee it was shielded from access by Chinese authorities.

TikTok, which is also in the crosshairs of the United States, acknowledged during a probe that it has hosted European data in China, contrary to a previous denial, according go Ireland’s data protection watchdog.

One of the largest fines ever imposed by the authority followed a probe into the lawfulness of data transfers by TikTok.

In 2023 Ireland’s Data Protection Commission (DPC) fined TikTok — which has 1.5 billion users worldwide, 345 million euros for breaches of European rules on processing child data.

DPC deputy commissioner, Graham Doyle, disclosed in a statement, “TikTok failed to verify, guarantee and demonstrate that the personal data of (European) users, remotely accessed by staff in China, was afforded a level of protection essentially equivalent to that guaranteed within the EU.

“TikTok did not address potential access by Chinese authorities to (Europeans’) personal data under Chinese anti-terrorism, counter-espionage, and other laws identified by TikTok as materially diverging from EU standards.

TikTok said it planned to appeal the EU fine, insisting it had “never received a request” from Chinese authorities for European users’ data.

“(TikTok) has never provided European user data to them. We disagree with this decision and intend to appeal it in full,” Christine Grahn of TikTok Europe said.

Recall, the social media giant has been in the crosshairs of Western governments for years over fears that personal data could be used by China for espionage or propaganda purposes.

TikTok also infringed requirements within the EU’s General Data Protection Regulation (GDPR) by transferring user data to China, said the DPC’s statement.

Friday’s decision “includes administrative fines totalling 530 million euros and an order requiring TikTok to bring its processing into compliance within six months,” it said.

The authority said 45 million euros of the fine was imposed due to a lack of transparency between 2020 and 2022, when the platform did not indicate to users which countries the data was transferred to or that it could be accessed from China.

The DPC said its decision also includes an order suspending TikTok’s transfers to China if the firm does not meet the six-month deadline.

The fine is expected to increase pressure against the social network in the United States.

The US Congress passed a law in 2024 requiring ByteDance to divest control of TikTok in the United States or be banned from the country.

President Donald Trump has postponed twice, until June 19, the deadline set for the sale of the social network, which has 170 million American users.

Aside from the data issue, TikTok is also accused of confining its users to silos through an opaque and powerful recommendation algorithm, fostering the spread of misinformation and illegal, violent, or obscene content.

Several countries have banned the platform for varying periods, such as Pakistan, Nepal, and France in the territory of New Caledonia.

(AFP)