Ireland: DPC launches inquiries into TikTok on Data Protection by Design/Default and transfers to China
The Data Protection Commission ('DPC') announced, on 14 September 2021, that it had initiated two inquiries pursuant to Section 110 of the Data Protection Act 2018 in relation to TikTok Technology Limited's compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the DPC outlined that the first inquiry will examine TikTok's compliance with GDPR's Data Protection by Design and Default requirements as they relate to the processing of personal data in the context of platform settings for users under age 18 and age verification measures for persons under the age13. In addition, the DPC highlighted that this inquiry will also examine whether TikTok has complied with the GDPR's transparency obligations in the context of the processing of personal data of users under the age 18.
Furthermore, the DPC indicated that the second inquiry will focus on data transfers to China and TikTok's compliance with the GDPR's requirements for transfers of personal data to third countries.
You can read the press release here.