Overview
- The €530 million fine includes €45 million for transparency failures and €485 million for illegal transfers of European user data to China.
- TikTok admitted in April 2025 that limited European user data was stored on Chinese servers, contradicting previous claims made during the investigation.
- This is the third-largest GDPR fine ever issued, following sanctions against Amazon and Meta-Facebook.
- The Irish DPC is considering additional regulatory actions, citing concerns over potential access to user data by Chinese authorities.
- TikTok plans to appeal the decision, arguing that the DPC overlooked security measures implemented under its €12 billion Project Clover initiative.