TikTok’s data-to-China penalty raises questions on EU rules on data transfers

Table of contents

• Equivalent standards?

Article summary

MLex: A €530m EU fine against TikTok for breaching Regulation (EU) 2016/679, the General Data Protection Regulation (EU GDPR) has raised questions about whether any company that sends personal data to China can do so legally under the law. The Irish data regulator’s decision follows heightened concern about data flows to China. It raises the question of whether companies can fill in the data protection gaps for transfers outside of the EU and still meet the EU GDPR’s ‘essentially equivalent’ standard.