Overview
- The Irish Data Protection Commission imposed a €530 million fine on TikTok for violating GDPR through illegal data transfers and lack of transparency.
- The fine includes €45 million for transparency failings and €485 million for transferring European user data to China between 2020 and 2022.
- TikTok announced it will appeal, arguing the regulator overlooked its €12 billion Project Clover initiative to localize EU data storage.
- In April 2025, TikTok disclosed that some European user data had been stored on Chinese servers, a breach it discovered in February 2025.
- Regulators are consulting with EU counterparts on potential further enforcement actions, citing concerns over Chinese access to user data under local laws.