ByteDance is preparing for significant legal and financial repercussions as it faces multiple lawsuits and investigations related to TikTok.

Following a record US$370 million fine imposed by Ireland’s Data Protection Commission last September for mishandling children’s personal data, recent corporate filings disclose that the company has set aside US$1 billion to cover future penalties from European privacy regulators.

Changing data protection regulations in Europe present ongoing uncertainty for ByteDance.

The interpretation of the European Union’s General Data Protection Regulation (GDPR) remains fluid, with investigations subject to review by supervisory authorities.

As a result, fines may exceed the current US$1 billion set aside, particularly as the European Commission has opened an investigation into TikTok’s practices under the newly instituted Digital Services Act (DSA).

Beyond the aforementioned fine, TikTok has faced sanctions from various regulators, including an US$11 million penalty in Italy for inadequate content checks and a US$16 million fine from the United Kingdom’s data privacy regulator for insufficient safeguards for children.

TikTok’s scrutiny extends beyond Europe.

A bipartisan coalition of attorneys general from 13 US states and the District of Columbia recently filed lawsuits alleging that the app is designed to encourage compulsive use that adversely affects teenagers’ mental health.

More broadly, ByteDance is grappling with various lawsuits and investigations worldwide concerning TikTok’s addictive features and user data protection.