TikTok privacy update in Europe confirms China staff access to data as GDPR probe continues • ZebethMedia

An incoming privacy policy change announced by TikTok yesterday for users in Europe — which, for the first time, names China as one of several third countries where user data can be remotely accessed by “certain” company employees to perform what it claims are “important” functions — has landed months ahead of expected movement on a year+ long investigation into the platform’s data exports to China under the bloc’s General Data Protection Regulation (GDPR).
The GDPR probe into the legality of the video sharing platform’s data transfers to China is being led by Ireland’s Data Protection Commission (DPC), TikTok’s lead privacy regulator in the region, which opened the inquiry just over a year ago. The DPC told ZebethMedia today that it expects its TikTok data transfers inquiry to progress to the next stage in the coming months — with a draft decision slated to be sent to other EU DPAs for review in the first quarter of next year.
This ‘Article 60’ review process could lead either to an affirming of Ireland’s draft decision — which would then, in relatively short order, allow for a final decision to be issued (potentially before the middle of next year, judging by past inquiry timelines). However if other EU regulators raise objections to Ireland’s draft decision the inquiry would have to move to an ‘Article 65’ dispute resolution process — which could add many more months to the process before a final decision could be issued as the bloc’s regulators seek consensus.
It’s not clear whether TikTok’s announcement of the privacy policy tweak relates to this overarching GDPR investigation. The incoming changes — which are due to apply from December 2 — do also include an update on how the platform collects users location information so they are not wholly focused on data transfers.
But the disclosure of China staffers accessing European user data could also be a not-very-subtle attempt to pre-empt regulatory enforcement over its data transfers — and try to soften a future blow by being able to point to steps already taken to improve its transparency with European users. (Not that that is the only potential issue of regulatory concern vis-a-vis data exports, though.)
A spokesman for TikTok declined to comment on whether its updated privacy policy is in any way linked to the GDPR inquiry — saying it could not do so as the inquiry remains ongoing.
However in a blog post announcing the update, the company claimed the changes “include greater transparency into how we share user information outside of Europe”.
That’s notable because transparency is a key principle of the GDPR — while infringements of the transparency principle can lead to stiff penalties (such as the $267M fine for Meta-owned WhatsApp last year, after an Ireland-led inquiry found a string of transparency breaches).
Claiming you’re being transparent and actually being transparent are not necessarily the same thing, of course. So it’s worth noting that TikTok’s updated privacy policy appears to atomize key bits of information — such as the full list of third countries countries where employees may remotely access European users’ data and for what specific reasons — across a number of collapsable menus and hyperlinks spread throughout the policy, thereby requiring a user to click around, follow multiple links and basically hunt for relevant intel amid a larger morass of data in order to piece together a comprehensive view of what’s happening with their data (rather than clearly articulating and collating everything into a single, easy to digest view…).
So, if it’s transparency TikTok is really shooting for here it still looks like it has work to do.
Also still a work in progress for TikTok: A data localization project to store European users’ data in the region — which, earlier this year, it announced had been delayed again (until 2023).
Thing is, if TikTok intends to continue to allow employees located in third countries with no EU adequacy agreement affirming they have essentially equivalent data protection standards as the bloc to have remote access to European users’ information then questions over the legality of its international data transfers are likely to persist.
As well as China, TikTok’s privacy policy names Brazil, Malaysia, Philippines, Singapore, and the US (which has only a preliminary agreement with the EU for a fresh data transfer agreement atm) as countries where employees have remote access to European user data without the cover of an adequacy agreement — saying it’s relying on standard contractual clauses (SCCs) for these transfers.
But, as the EDPB guidance on data transfers points out, each transfer to a third country must be individually assessed and some may not be possible legally, even with supplementary measures applied. So every single one of these transfers will need to stand up to regulatory scrutiny.
Given so many third country transfers, TikTok’s European data localization project can only — at least for now — be considered a PR exercise. And/or an attempt to curry favor with local regulators in the hopes they take a kinder view of ongoing data exports. Unless or until it ceases data exports to third countries and finds a way to fully firewall its parent entity in China from being able to access any European users’ data in the clear.
TikTok’s spokesman declined to comment on any future plans it may have to further adapt its data transfers in light of these challenges but he pointed back to its blog post — which describes its approach to data governance in Europe as being “centred on limiting the number of employees with access to European user data, minimising data flows outside of the region, and storing European user data locally”.
TikTok’s wider problem is that it’s facing dialled up regulatory scrutiny across the Western world more generally as a result of security concerns attached to the Chinese state’s ability to gain access to data commercial platforms/services hold on their users — with national security laws in its home country overriding the usual standard contractual protections.
Its platform also collects an awful lot of user data — which only fuels concerns about its capacity to be repurposed as a data honeypot for state surveillance or even for ‘soft power’ foreign influence ops.
While its tracking and profiling of users invites further specific regulatory headaches in Europe — on the privacy and consumer protection side — which are applying some limits on how it can operate.
For example, TikTok recently agreed to freeze a controversial change to the legal basis it relies upon to run targeting advertising after a formal warning from the Italian DPA — and some follow-up “engagement” from the DPC — over a plan to remove consent (and claim a legitimate interest to run targeted ads). So its profiling and ad targeting model is facing challenges on a number of fronts, even as it tries to defend its business against wider, geopolitical-related security concerns.

             Disclaimer: Any Product You Buy Here, Amazon Pays me A Commission With No Additional Fee.

 

This is a must Have Software For Your Home & Business. This software will help your business and make your job Stress Free.

Business and Office Management  Category.

(Old Version) H&R Block Tax Software Deluxe + State 2023 with Refund Bonus Offer (Amazon Exclusive) (PC/MAC Download)

(4264)

20% Off $49.99 $39.97 (as of November 21, 2024 06:11 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Choose to put your refund on an Amazon gift card and you can get a 2% bonus. One state program download included. State e-file sold separately. Reporting assistance on income from investments, stock options, home sales, and retirement Guidance on max... read more

Acrobat Pro | 1-Month Subscription | PDF Software |Convert, Edit, E-Sign, Protect |Activation Required [PC/Mac Online Code]

(1444)

$29.99 (as of November 21, 2024 06:33 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Create and edit PDFs. Collaborate with ease. E-sign documents and collect signatures. Get everything done in one app, wherever you go. Edit text and images without jumping to another app. E-sign documents or request e-signatures on any device. Recipi... read more

Adobe Photoshop Elements 2025 & Premiere Elements 2025 Student & Teacher Edition | PC/Mac Code | Box with Download Code | Photo & Video Editing | 3-year term license | Activation Required

(17)

$79.99 (as of November 21, 2024 05:39 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Remove photo objects with AI power. Create and control photo depth with AI. Change the color of any object in your photo. Seamlessly combine multiple pics. Create dynamic video titles with text styling controls. Access free Adobe Stock video title te... read more

Adobe Photoshop Elements 2025 | Photo Editing | 3-Year Term License | PC/MAC | Box with Download Code | Activation Required

(17)

$99.99 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Remove objects with AI power. Create and control depth with AI. Change the color of any object. Seamlessly combine multiple pictures. Create with modern textures and graphics. Be creative with the web and mobile beta apps. Get a 3-year term license f... read more

AVG Ultimate 2024 | Antivirus+Cleaner+VPN | 5 Devices, 2 Years [PC/Mac/Mobile Download]

(1124)

14% Off $34.99 $29.99 (as of November 21, 2024 06:11 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

AVG ULTIMATE: Your all-in-one antivirus, VPN, and tuneup combo. OUR BEST SECURITY: Enjoy our advanced, real-time security for your computers, tablets, and phones. OUR BEST PRIVACY: Secure your privacy with powerful encryption so no one can see what y... read more

Bitdefender Total Security - 5 Devices | 1 year Subscription | PC/Mac | Activation Code by email

(2361)

50% Off $89.99 $44.99 (as of November 21, 2024 06:43 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows, Mac OS, iOS, and Android. Organize and keep your digital life safe from hackers. ADVANCED THREAT DEFENSE: Your software is always up-to-date ... read more

Bitdefender Total Security 2024 – Complete Antivirus and Internet Security Suite – 5 Devices | 2 year Subscription | PC/Mac | Activation Code by Mail

(3511)

$74.99 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (macOS X Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later... read more

Clifford The Big Red Dog Thinking Adventures CD-ROM Parent's Guide Ages 4-6

(9)

-85% Off $2.43 $4.50 (as of November 21, 2024 05:37 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

CLIP STUDIO PAINT PRO - Version 1 - Perpetual License - for Microsoft Windows and MacOS

(3061)

$23.99 (as of November 21, 2024 06:18 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

Create original sketches using your mouse or draw naturally with a pen tablet. Powerful coloring tools make CLIP STUDIO PAINT your all-in-one illustration, painting, manga and comic creation solution. Use an assortment of powerful art tools for illus... read more

CodaKid Roblox Coding, Award-Winning, Coding for Kids, Ages 9+ with Online Mentoring Assistance, Learn Computer Programming and Code Fun Games with Lua and Video Game Programming Software (PC & Mac)

(332)

$59.00 (as of November 21, 2024 05:32 GMT +00:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

CodaKid’s Roblox Lua coding educational software provides 100+ hours of interactive student projects designed to engage and educate kids, teaching them to become creators in their own right. Students learn real Lua coding and video game design using ... read more