Dutch DPA warns users: TikTok continues to send personal data to China
The Dutch data protection authority (DPA) is warning TikTok users in the Netherlands that TikTok will continue to send user data to China. In doing so, the social media platform is defying a joint decision by European privacy regulators, who have determined that the transfer of this information is unlawful.
The Dutch data protection authority (DPA) is warning TikTok users in the Netherlands that TikTok will continue to send user data to China. In doing so, the social media platform is defying a joint decision by European privacy regulators, who have determined that the transfer of this information is unlawful.
European privacy regulators had previously determined that TikTok’s transfer of personal data to servers in China was unlawful and an infringement of the General Data Protection Regulation (GDPR).
TikTok has challenged the European privacy regulators’ decision and continues to transfer personal data to China in the meantime.
“TikTok collects and uses a lot of personal data, including click behavior, location data, contact information, and sometimes financial data. Young people in particular are often insufficiently aware of this data collection and the risks involved,” Vice Chairman Monique Verdier says in a statement.
“In Europe, clear rules apply that give people control over their data. Outside the EU, such as in China, these rules don't apply in the same way. Users often have little control over what happens to their data,” she continues.
The Dutch DPA urges users and organizations to carefully consider whether they wish to continue using TikTok and related services that transfer user data to countries outside the EU.
The data and privacy supervisor recommends that TikTok users study the company’s notification and privacy policies thoroughly. In addition, they should check the privacy settings to see what access TikTok’s application has, including the microphone, camera, contacts, or location.
“Decide whether you want to continue using TikTok under these conditions. If not, you can (temporarily) delete the app or deactivate your account,” the privacy regulator advises.
Businesses and organizations ought to map the risks associated with TikTok by performing a data protection impact assessment (DPIA). Furthermore, they should take into account that European privacy regulators have deemed TikTok’s data transfers to be unlawful.
Lastly, companies that continue to use TikTok should be clear and transparent about this to their target audience.
Unlock more exclusive Cybernews content on YouTube.