Irish DPC opens fresh investigation into TikTok's data transfer to China

The Irish Data Protection Commission (DPC) has launched a fresh investigation into TikTok concerning the short video social media platform's transfers of EU/EEA users' personal data to servers located in China. The latest investigation follows a previous DPC inquiry, concluded in April 2025. This investigation, which also examined TikTok's data transfers to China, resulted in fines totalling €530 million, along with an order requiring TikTok to bring its processing into compliance within 6 months. During that earlier investigation, TikTok claimed that EU/EEA user data was only remotely accessed from China, not stored on servers located in China.

However, TikTok informed the DPC in April that, contrary to its previous evidence, a limited amount of EU/EEA user data had, in fact, been stored on servers in China. The DPC had expressed "deep concern" over TikTok's submission of inaccurate information during its earlier investigation, stating it was "considering what further regulatory action may be warranted." This new investigation is a direct result of that consideration.

The latest investigation aims to determine TikTok's compliance with its EU General Data Protection Regulation (GDPR) obligations regarding such transfers, specifically focusing on the lawfulness of transfers under Chapter V. The investigation will also examine TikTok's adherence to its accountability obligations under Article 5(2), transparency regarding third-country transfers under Article 13(1)(f), and its requirement to cooperate with the supervisory authority under Article 31.