Ireland’s Data Protection Commission announced a second round of fines issued to TikTok totaling 530 million euros for alleged violations of the EU General Data Protection Regulation. Per the DPC’s decision, TikTok was allegedly found to have transferred personal data outside the European Economic Area to servers located in China, despite testifying that China-based workers at parent company ByteDance could only access the data remotely, in violation of GDPR Article 46(1). Additionally, the DPC found from July 2020 to December 2022 TikTok allegedly violated GDPR Article 13(1)(f) by failing to properly notify EU data subjects about data transfers and processing activity taking place in China and the U.S. Editor’s note: IAPP Staff Writer Lexie White reported on the initial DPC fine issued to TikTok.Â
Full story