TikTok appeal against €530m GDPR fine begins

On Tuesday, TikTok began its appeal in the High Court in Dublin against the €530 million in administrative fines imposed by the Irish Data Protection Commission (DPC) for violations of the EU General Data Protection Regulation (GDPR) concerning the systemic and continuous transfer of personal data to China. In addition to the financial penalty, the DPC ordered the social media company to bring its processing into compliance with the GDPR within 6 months.

The 10-day hearing involves legal arguments over the interpretation of Chinese law and the security of TikTok's data practices. Senior counsel for the company argued that the consequences of the DPC decision are "immense", estimating that compliance costs could reach €5 billion. The process would reportedly involve relocating thousands of employees currently based in China.

The case represents a significant test of the GDPR and its regulation of data transfers to jurisdictions with known security concerns. If the court upholds the DPC's decision, TikTok could be forced to disconnect its European operations from China entirely. This follows the recent restructuring of its US operations into a separate app to address similar security concerns.

Training Announcement: Freevacy offers a range of independent data protection qualifications from IAPP and BCS. Our certified courses are available at foundation and practitioner levels and cover multiple legal jurisdictions, data protection operations management, and the implementation of complex privacy solutions in technical environments. Find out more.