ua en ru

TikTok fined €530 million for violating EU data privacy rules

TikTok fined €530 million for violating EU data privacy rules EU hits TikTok with €530 million fine for mishandling user data (Illustrative photo: Getty Images)

TikTok has been hit with a massive €530 million fine by Ireland's privacy watchdog over serious GDPR violations, NBC News reports.

Ireland's Data Protection Commissioner (DPC), acting as the lead EU regulator, announced the fine against TikTok on Friday, citing the platform's failure to adequately protect the personal data of European users.

At the core of the issue is the possibility of Chinese authorities accessing user information through staff in China, a concern rooted in Beijing's counter-espionage laws.

"The platform did not demonstrate that users' personal data, some of which is remotely accessed by staff in China, was afforded the high level of protection required under EU law," the DPC stated.

TikTok had maintained that no EU user data was stored in China during the four-year investigation. However, it recently admitted that a small amount of data was, in fact, stored there as of February — though it claims it was since deleted.

This is not the first regulatory challenge for TikTok in the region. In 2023, the company faced a €345 million penalty over mishandling children's data.

The DPC emphasized it is closely monitoring the platform, adding, "We are considering what further regulatory action may be warranted," said Deputy Commissioner Graham Doyle.

TikTok to appeal, warns of broader implications

TikTok has strongly rejected the regulator's conclusions and intends to challenge the ruling.

The company argues that it complies with EU rules through standard contractual clauses that tightly restrict and monitor remote access.

"We have never received a request for EU user data from the Chinese government and have never provided any," TikTok insisted in a public statement.

It also pointed to its recently implemented Project Clover — a data protection initiative launched in 2023 — which includes independent oversight and dedicated data centers in Europe and the US.

The company warned the ruling could have a ripple effect: "This decision risks setting a precedent with far-reaching consequences for companies and entire industries across Europe that operate on a global scale."

Last month, the European Commission also fined Apple €500 million and Meta €200 million under the new Digital Markets Act for violating EU digital regulations.