China denies misusing data after TikTok fined by EU

China’s foreign ministry has denied allegations that the country requires companies to collect or store data illegally.

The statement came after the European Union imposed a €530 million (US$600 million) fine on TikTok for transferring user data from Europe to China.

The company also failed to safeguard this data from potential access by Chinese authorities.

This penalty, announced on May 2, 2025 is the second-largest fine the EU has issued for data protection violations.

TikTok, owned by the Chinese tech firm ByteDance, has indicated it will appeal the decision.

🔗 Source: Agence France-Presse

🧠 Food for thought

1️⃣ TikTok’s mounting privacy issues reflect escalating global data governance tensions

The current €530 million fine represents a significant escalation from TikTok’s previous privacy penalties, showing regulators’ growing assertiveness on cross-border data issues.

In 2019, TikTok (then known as Musical.ly) was hit with a record $5.7 million FTC fine for violating children’s privacy laws by collecting personal information from users under 13 without parental consent 1.

That earlier penalty, while substantial at the time, pales in comparison to the current €530 million ($600 million) fine imposed by Ireland’s Data Protection Commission specifically for transferring user data from Europe to China without adequate protections 2.

This progression shows how regulatory scrutiny has evolved from focusing on specific vulnerable populations (children) to addressing fundamental concerns about international data transfers and potential government access.

The latest fine highlights the growing friction between the EU’s strict data protection framework demanding transparency and China’s approach to data governance that prioritizes state sovereignty and security 3.

2️⃣ The widening divide between EU and Chinese data governance philosophies

This case highlights the fundamental differences between EU and Chinese approaches to data protection that create mounting challenges for companies operating across both jurisdictions.

The EU’s GDPR emphasizes individual rights and transparency, while China’s Personal Information Protection Law (PIPL) focuses primarily on state sovereignty and security considerations 3.