On 25 March 2025, the Irish Data Protection Commission
(‘DPC') confirmed that it received no
objections to its draft decision on how TikTok Technology Limited
(‘TikTok') transfers personal data to
China.
The DPC, in its role as the lead supervisory authority for the
Irish-headquartered TikTok, opened two ex officio inquiries into
the TikTok's GDPR compliance in September 2021 in relation
to:
- the processing of children's personal data; and
- the data the platform sends to China.
The first of these resulted in the DPC imposing on TikTok
a EUR 345 million fine in 2023 for
insufficient processes for user age verification when creating
accounts as well as the Company's
‘public-by-default' children's setting whereby,
when users of public accounts posted a video, the video was
publicly published to ‘Everyone' by default.
