The Ireland Data Protection Commission (DPC) has fined Tiktok con 530 million of euros for Send the data of its European user to servers in Chinawhich violates the RGPD. In addition, the company has six months to comply with the law on data process. The decision, of course, is appealable.
The DPC has decided that Tiktok violates the RGPD because it has not been able to guarantee that the data that has been sent to China would be protected at a level equivalent to that of those that are stored in the EU. In addition, the entity stressed that the laws of anti -terrorism and counter -signing of China are potentially dangerous, and that the Chinese authorities could use them to access the data of European users of the social network.
This sanction is actually the sum of several amounts of fine for breaching different points of the laws in force in the EU. Thus, 485 million euros of the fine are for the sending of data to China, and the remaining 45 million euros because its privacy policy does not properly explain data transfers.
Of course, Tiktok updated his privacy policy in 2022, and according to the courts those new terms do comply with the current legality. It is not the only step they have recently taken to try that the sanction does not occur, or that it was soft. They have also promised to invest about 12,000 million euros in the construction of data centers in the EU, but it has not been enough to dodge the sanction.
During the investigation that has led to the sanction, Tiktok insisted on making it clear that user data only had remote access from China, and that were not stored on servers in that country. A few weeks ago, the company informed the court in charge of the case, of course, that he had discovered that a few data from Europeans had been stored in China, and that they had been eliminated after the discovery. This security gap will make more measures against Tiktok from Europe.
To date, The sanction just imposed on Tiktok is the third largest for breaking the RGPDand only exceeds the goal and Amazon. It is not the first sanction for the social network in the EU, since the Irish courts already fined it in 2023 with 367 million for how it processed the data of the minors.
