Irish Data Protection Commission Fines TikTok €530 Million dataprotection.ie

The Irish Data Protection Commission:

The decision, which was made by the Commissioners for Data Protection, Dr Des Hogan and Mr Dale Sunderland, and has been notified to TikTok, finds that TikTok infringed the GDPR regarding its transfers of EEA User Data to China and its transparency requirements. The decision includes administrative fines totalling €530 million and an order requiring TikTok to bring its processing into compliance within 6 months. The decision also includes an order suspending TikTok’s transfers to China if processing is not brought into compliance within this timeframe.

It turns out data use expectations can be consistent and it is possible to penalize violators when there are privacy laws. This seems preferable over ad hoc responses.