Social media platform TikTok is facing a fresh European Union privacy investigation into user data sent to China, regulators said Thursday.
The Dublin-based Data Protection Commission (DPC) opened the inquiry as a follow-up to a previous investigation in which TikTok had told the regulator it didn't store European user data in China, and that data was only accessed remotely by staff in China.
However, it later backtracked and said that some data had in fact been stored on Chinese servers.
While the watchdog responded at the time by saying it would consider further regulatory action, it also ended up fining the company 530 million Euro (USD 620 million) earlier this year.
“As a result of that consideration, the DPC has now decided to open this new inquiry into TikTok,” the watchdog said.
Also Read: China bans European medical devices in latest spat with EU
The Irish national watchdog, whose European headquarters are based in Dublin, serves as TikTok’s lead data privacy regulator in the 27-nation EU.
“The purpose of the inquiry is to determine whether TikTok has complied with its relevant obligations under the GDPR in the context of the transfers now at issue, including the lawfulness of the transfers,” the regulator said, referring to the European Union's strict privacy rules, known as the General Data Protection Regulation (GDPR).
TikTok did not respond immediately to a request for comment.
Owned by China's ByteDance, TikTok has been under scrutiny in Europe over how it handles personal user information amid concerns from Western officials that it poses a security risk.
Under GDPR, European user data can only be transferred outside of the bloc if there are safeguards in place to ensure the same level of protection.
Only 15 countries or territories are deemed to have the same data privacy standard as the EU, but China is not one of them.