🇮🇪 DPC fines TikTok €530m for China transfers
[Added DPC comments] TikTok also ordered to bring processing into compliance within six months or stop the transfers. They also breached transparency by failing to disclose the third countries involved and didn't explain the nature of the transfers in its privacy policy.
May 15, 2025
—
2 min read
You might also like
Norway DPA with record NOK 4 million DPO fine
members
–
8 min read
BIG share: the DPA’s advance notification flagged a potential NOK 99m (~€8.3m) fine! Datatilsynet fined Telenor ASA for failing to properly assess and document the DPO role, including independence, potential conflicts of interest, and a direct reporting line to top management.
🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising ('BA & TA')
members
–
7 min read
Key takaways: Lack of lawful basis = loss of control = 'significant damage', lawful bases are notoriously tricky to get right, and most have lots to gain in improving information and transparency. Full decision = a key lesson on legitimate interest and LIAs.
🇮🇪 DPC fines Meta €91m for failing to safeguard passwords and notify breaches
members
–
1 min read
UPDATE 1 Jan: Summary + full decision published! The DPC fines Meta for failing to safeguard users' passwords (storing them in plaintext!) and for notifying the breach too late.