TikTok's data storage practices in China under scrutiny by the European Union in Ireland - TikTok under investigation by the European Union in Ireland for storing user data in China
TikTok, the globally popular social media platform with over 1.5 billion users worldwide, has found itself under scrutiny for data protection issues in the European Union (EU). The Irish Data Protection Commission (DPC), the authority responsible for overseeing TikTok's data protection measures in the EU, has expressed concern over TikTok providing inaccurate information during an investigation.
The controversy arose when TikTok admitted that data had been stored in China, attributing it to a "technical issue." Initially, the company maintained that it did not store EU user data in China but allowed remote access by staff in China. However, in February 2025, TikTok revealed the contrary, prompting the DPC to launch an investigation.
The €530 million fine imposed on TikTok in early May is the second highest ever issued by the DPC. The fine was part of an investigation focusing on remote access by Chinese staff. TikTok, owned by ByteDance Ltd., has announced its intention to appeal the fine.
The DPC expressed "deep concern" to TikTok because the company provided "inaccurate information" during the investigation. The ongoing investigation aims to "ascertain whether TikTok has complied with its relevant obligations under the EU General Data Protection Regulation."
The data protection issue involved data stored on servers outside the EU, but not in China. However, the storage of data on Chinese servers raises concerns about compliance with GDPR requirements, as China is not among the countries with an EU adequacy agreement.
TikTok categorically denies accusations of collaborating with Chinese authorities. The company has since deleted the data on Chinese servers. Despite the ongoing investigations, TikTok remains a popular platform, particularly among young people.
The DPC is currently investigating TikTok to ensure its compliance with the EU General Data Protection Regulation. The Irish Data Protection Commission (DPC) is responsible for overseeing TikTok and other online conglomerates on behalf of the EU, as they have their EU headquarters in Ireland.
[1] https://www.theguardian.com/technology/2025/feb/12/tiktok-stored-eu-user-data-in-china-in-breach-of-privacy-rules [2] https://www.reuters.com/article/us-tiktok-eu-data/exclusive-tiktok-stored-eu-user-data-in-china-breaching-privacy-rules-document-shows-idUSKCN2PQ14A [3] https://www.nytimes.com/2025/feb/12/technology/tiktok-eu-data-china.html
- The ongoing investigation by the Irish Data Protection Commission (DPC) against TikTok is centered on determining whether the social media platform has adhered to its obligations under the EU General Data Protection Regulation (GDPR), as allegations of inaccurate information provided during the investigation have been raised.
- The controversy surrounding TikTok's data protection measures in the European Union (EU) has also involved the intersection of technology and politics, as the debate continues over the compliance of the social media giant with GDPR requirements, especially regarding data storage on Chinese servers.
