DPC launches two TikTok GDPR compliance probes
The Data Protection Commissioner (DPC) Helen Dixon has begun two GDPR-compliance probes into social-media platform TikTok in connection with the processing of children's personal data, and transfers of data to China.
The first will look at the processing of personal data in the context of platform settings for users under 18, and age-verification measures for under-13s.
It will also look at whether TikTok has complied with the GDPR transparency obligations on personal-data processing for under-18s.
The second inquiry will focus on transfers by Tiktok of personal data to China, and the GDPR compliance requirement for personal-data transfers to third countries.
Own-volition
The probes are own-volition inquiries, which means that the DPC is taking on the investigation on its own initiative without a complaint from a third party.
Earlier this month, the DPC levied a record €225 million GDPR fine on WhatsApp.
The Irish DPC has been criticised by other EU regulators for its speedy inquiries and severe sanctions.
The Irish regulator had 27 international inquiries in progress at the end of last year, including 14 into Facebook and its subsidiaries.