DPC Opens New TikTok Inquiry Over China Info Transfers

TikTok had maintained that it didn’t retailer EEA particular person info on servers in China, however, it later talked about that was untrue.

The Irish Information Security Charge (DPC) has launched one different inquiry into TikTok after the company found proof that it disclosed inaccurate data to the watchdog all through its remaining investigation.

The DPC started probing TikTok once more in 2021, concerned over the Chinese language language-owned social media platform’s info change practices when it obtained right here to prospects inside the European monetary house (EEA).

In essence, the EU places strict security requirements on companies that change particular person info from the realm to a third nation.

Concluding the four-year-long investigation earlier this 12 months, the DPC found that TikTok had breached the EU Primary Information Security Regulation (GDPR) by failing to verify, guarantee and effectively show that the non-public info of EU prospects was given the an identical stage of security when remotely accessed by employees in China that it may need been inside the EU.

The social media platform obtained fined €530m in consequence.

In an announcement on the time, TikTok talked about that the ruling set a precedent with “far reaching penalties” for worldwide companies.

It talked about that the selection didn’t ponder the company’s “stringent” info security measures featured in Enterprise Clover – its billion-euro info security initiative. TikTok has appealed in opposition to the great in Irish courts.

Inaccurate data

All by the sooner inquiry, TikTok had maintained that it didn’t retailer EEA particular person info on servers located in China.

The company talked about that the data could solely be accessed by TikTok workers in China by means of distant entry.

Nonetheless, the company talked about that in February of this 12 months it discovered proof of “restricted” EEA particular person info saved on Chinese language language servers, and educated the DPC of its findings in April.

The DPC’s late April good doesn’t take this into account, and within the current day (10 July), the watchdog has launched a model new inquiry to seek out out whether or not or not the company complied with the GDPR when transferring EEA particular person info into China.

Amongst completely different points, the inquiry will ponder if TikTok has been accountable and clear about third-country info transfers. SiliconRepublic.com has reached out to TikTok for suggestions.

In an announcement earlier this 12 months, DPC deputy commissioner Graham Doyle talked about that the watchdog is taking the present developments “very severely”.

“Whereas TikTok has educated the DPC that the data has now been deleted, we’re considering what extra regulatory movement is also warranted, in session with our peer EU Information Security Authorities.”

In 2023, TikTok was fined €345m after the DPC found that the social media large didn’t alter to GDPR tips concerning the processing of kids’s info.

That good, however, has moreover been appealed by TikTok in every Ireland, along with with the Courtroom docket of Justice of the European Union.

Don’t miss out on the information it’s important succeed. Be a part of the On daily basis Momentary, Silicon Republic’s digest of need-to-know sci-tech info.