(Source: Reuters) |
DPC said TikTok failed to show that EU users' personal data, some of which is remotely accessed by staff in China, was afforded the high level of protection provided for under EU law. TikTok strongly contested the finding and said that it has used the EU's own legal framework, specifically so-called standard contractual clauses, to grant tightly controlled and limited remote access.
TikTok plans to appeal the decision which it said fails to fully consider data security measures first rolled out in 2023 that independently monitor remote access and ensure EU user data is stored in dedicated data centres in Europe and the US.
It is the second time TikTok has been reprimanded by the DPC. It was fined 345 million euros in 2023 for breaching privacy laws regarding the processing of children's personal data in the EU.