Ireland's Data Protection Commission is reviewing whether to impose new sanctions on TikTok after a court ordered a reconsideration of a data-transfer ban [1].

The decision follows long-standing concerns that the short-video platform may be transferring European Union user data to China in violation of the General Data Protection Regulation [2]. Because the DPC serves as the lead regulator for many tech firms in the EU, its ruling could set a significant precedent for how international data flows are monitored and restricted.

According to a report from June 30, 2024, the Irish High Court ordered the regulator to reconsider the order suspending data transfers to China [3]. The DPC said it will decide "in the coming period" whether to pursue fresh sanctions against the company [1].

TikTok has consistently denied allegations that it allows the Chinese government access to its users' information. A TikTok spokesperson said, "TikTok has never provided European user data to Chinese authorities and would refuse any request that conflicts with applicable laws" [1].

This legal friction occurs against a backdrop of heavy financial penalties for the company. TikTok previously faced a fine of €530 million for GDPR violations [2]. The current review focuses specifically on the legality of moving data across borders, and whether the company's safeguards are sufficient to protect EU citizens from foreign surveillance.

Regulators remain focused on whether TikTok's corporate structure allows for undue influence from Chinese authorities, a point the company continues to dispute in court [2].

“TikTok has never provided European user data to Chinese authorities”

This case highlights the ongoing tension between the EU's strict privacy framework and the operational realities of global tech platforms. If the DPC maintains a ban on data transfers to China, TikTok may be forced to localize all European data within the bloc or face continuous sanctions, further complicating the platform's global business model.