The Data Protection Commissioner has announced two investigations into social media platform TikTok looking into compliance with the General Data Protection Regulation (GDPR) regarding the processing of children’s personal data and the transfer of data to China.
The former will look at the processing of personal data in the context of the platform’s settings for users under the age of 18 and age verification measures for individuals under the age of 13.
It will also consider whether TikTok has complied with its GDPR transparency obligations when processing personal data of users under the age of 18.
The second inquiry will focus on Tiktok’s transfers of personal data to China and TikTok’s compliance with GDPR requirements for transfers of personal data to third countries.
Inquiries are voluntary inquiries, which means that the DPC initiates the investigation on its own without a third party complaint.
Earlier this month, DPC imposed a record fine of €225 million on WhatsApp under the General Data Protection Regulation.
But the agency has faced criticism from other European regulators for the speed of its investigations and the severity of its sanctions.
The Irish regulator had 27 international inquiries in progress at the end of last year, including 14 inquiries at Facebook and its affiliates.
Additional reporting by Reuters
“Spécialiste de la télévision sans vergogne. Pionnier des zombies inconditionnels. Résolveur de problèmes d’une humilité exaspérante.”