Description

Opening of two own-volition inquiries into TikTok for alleged violations of the GDPR

On 14 September 2021, the Irish Data Protection Commission (DPC) initiated two inquiries into TikTok. The first investigation focuses on the company’s compliance with the data protection measures outlined in the General Data Protection Regulation (GDPR). In particular, the DPC will investigate the compliance of the children’s personal data collection and processing with the “data protection by design and default” requirements and examine the age verification measures implemented by the company.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2021-09-14
under deliberation

On 14 September 2021, the Irish Data Protection Commission (DPC) initiated two inquiries into TikTo…

2023-08-03
under investigation

On 3 August 2023, the European Data Protection Board (EDPB) announced that it adopted a binding dis…

2023-09-01
in force

On 1 September 2023, the Data Protection Commission (DPC) issued its ruling in the investigation in…

2023-10-10
under appeal

On 10 October 2023, TikTok filed an appeal against the fine and compliance order issued by the Iris…