The High Court upheld TikTok’s GDPR liability and its €530m fine, but sent the order suspending transfers to China back to the regulator for review.
TikTok lost the argument that mattered most and won itself some breathing room on the rest.
Ireland’s High Court has upheld the Data Protection Commission’s findings that the company breached EU privacy law by transferring European users’ data to China, and it left standing the €530 million fine that came with them.
But it ordered the regulator to reconsider the corrective measure that would suspend those transfers, which is the part TikTok cares about commercially.
The ruling, handed down in early June, settles the underlying liability. The court rejected TikTok’s contention that the Data Protection Commission had misapplied the EU rules governing international data transfers, affirming the core of the regulator’s inquiry into how data belonging to users in the European Economic Area moved to the People’s Republic of China.
