Support Centre

You have out of 10 free articles left for the week

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Ireland: DPC launches inquiries into TikTok on Data Protection by Design/Default and transfers to China

The Data Protection Commission ('DPC') announced, on 14 September 2021, that it had initiated two inquiries pursuant to Section 110 of the Data Protection Act 2018 in relation to TikTok Technology Limited's compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the DPC outlined that the first inquiry will examine TikTok's compliance with GDPR's Data Protection by Design and Default requirements as they relate to the processing of personal data in the context of platform settings for users under age 18 and age verification measures for persons under the age13. In addition, the DPC highlighted that this inquiry will also examine whether TikTok has complied with the GDPR's transparency obligations in the context of the processing of personal data of users under the age 18.  

Furthermore, the DPC indicated that the second inquiry will focus on data transfers to China and TikTok's compliance with the GDPR's requirements for transfers of personal data to third countries.

You can read the press release here