KOKA Co Working & Co Living

In April 2025, the Irish Data Protection Commission (DPC) issued a ruling concerning TikTok's compliance with the General Data Protection Regulation (GDPR) regarding the transfer of EEA (European Economic Area) user data to China. The DPC found that TikTok had not adhered to GDPR standards, specifically related to the remote access and transfer of this sensitive data. As a result of these findings, the DPC mandated that TikTok must rectify its data transfer practices within six months. Should TikTok fail to comply with this order, the DPC has indicated that it would suspend these data transfers entirely. TikTok has contested the DPC's ruling, stating that it disagrees with the findings and the required compliance measures. As part of its response, the company has chosen to appeal the decision through the Irish court system. Currently, the High Court of Ireland has placed a temporary hold on the enforcement of the DPC's decision, allowing TikTok to continue its data transfers to China while the appeal process unfolds. This ongoing situation raises significant implications for data privacy and protection, particularly in the context of international data transfers under the GDPR framework, and it reflects the increasing scrutiny that social media platforms face regarding user data compliance.