TikTok fined £452million for breaching EU privacy rules by sending data to China

TikTok did not address potential access by Chinese authorities to (Europeans') personal data under Chinese anti-terrorism, counter-espionage and other laws identified by TikTok as materially diverging from EU standards,

he added in a statement

We’ve had over a decade of EU-U.K., EU-U.S. fights and sagas on [data flows]. This is the first time we’ve seen anything significant on any other country outside of that transatlantic triangle — and it’s China,

said Jones

If the extensive measures implemented under Project Clover … as well as independent, third-party monitoring are deemed insufficient, it’s reasonable to ask: what would be considered sufficient

said Christine Grahn, TikTok’s head of public policy and government relations for Europe

It’s a one-size-fits-all clause that says organizations [and] natural persons of China have to comply with security services when asked something. I have a hard time seeing a Chinese company saying, ‘Sorry that that piece of data that you’re asking for lies on a European server,

he said

The GDPR requires that the high level of protection provided within the European Union continues where personal data is transferred to other countries,

DPC Deputy Commissioner Graham Doyle said in a statement

TikTok failed to verify, guarantee and demonstrate that the personal data of [European] users, remotely accessed by staff in China, was afforded a level of protection essentially equivalent to that guaranteed within the EU,

Deputy Commissioner Graham Doyle said in a statement

The facts are that Project Clover has some of the most stringent data protections anywhere in the industry, including unprecedented independent oversight by NCC Group, a leading European cybersecurity firm,

said Christine Grahn, TikTok's European head of public policy and government relations

The DPC is taking these recent developments very seriously. We are considering what further regulatory action may be warranted,

DPC Deputy Commissioner Graham Doyle said

This ruling risks setting a precedent with far-reaching consequences for companies and entire industries across Europe that operate on a global scale,

TikTok said in a statement

Beyond the DPC’s failure to substantively consider the extensive safeguards [already implemented by Tiktok], we are disappointed to have been singled out despite relying on the same legal mechanism employed by thousands of other companies providing services in Europe,

said Christine Grahn, TikTok’s head of public policy and government relations for Europe, in a written statement

Like many organisations that operate globally, TikTok has used the EU’s own legal framework, specifically, Standard Contractual Clauses to grant tightly controlled and limited access to employees in countries without data adequacy agreements,

TikTok said