TikTok has once again found itself in serious trouble—this time not in Washington, but in Brussels. On May 2, 2025, the European Union hit the popular video-sharing app with a massive fine of 530 million euros, or roughly $600 million, for violating data privacy laws. The penalty was issued by Ireland’s Data Protection Commission, which is responsible for overseeing TikTok’s compliance with privacy rules across the 27-country bloc.

At the center of the issue is TikTok’s transfer of European user data to China, a move that regulators say put millions of users, including minors, at risk of surveillance by the Chinese government. While TikTok claims it never handed over data to Chinese authorities, regulators are not convinced, especially after the company admitted that at least some data had been stored in China—after denying that fact for years.

According to the Irish Data Protection Commission, TikTok “failed to demonstrate that any user data it sends to China would be protected from government access” under China’s strict national security and anti-espionage laws. Graham Doyle, the deputy commissioner, said European users were not “afforded a level of protection essentially equivalent to that guaranteed within the E.U.”

European privacy law, specifically the General Data Protection Regulation (GDPR), requires companies to protect user data when it is sent outside the EU. This protection is supposed to ensure that countries receiving the data have privacy rules at least as strong as Europe’s. China does not meet that standard. The Chinese government has sweeping authority to force companies like TikTok’s parent firm, ByteDance, to share any information it demands—no matter where it was collected.

When pressed, TikTok admitted that a “limited” amount of European user data had in fact been stored on servers in China, despite repeated denials in the past. In response to the fine, TikTok issued a statement claiming that it “never received a request for European user data from the Chinese authorities, and has never provided European user data to them.” But the Irish commission did not find that statement reassuring, especially given the legal environment in China, where the government does not need to ask nicely—it can simply take.

A Pattern of Deception and Denial

The fine comes after years of growing skepticism about TikTok’s activities. As early as 2020, U.S. and European lawmakers warned that the app could be used by the Chinese Communist Party to spy on foreign citizens, spread propaganda, and manipulate public opinion. ByteDance, TikTok’s Beijing-based owner, has long insisted it operates independently of the Chinese government, but experts and whistleblowers have repeatedly questioned that claim.

A report by the advocacy group Noyb, which stands for “None of Your Business,” provided additional evidence of how data from TikTok and other Chinese companies was being routed back to China. In complaints filed across five EU countries, Noyb argued that China’s authoritarian surveillance practices made any data transfer to Chinese territory illegal under GDPR rules.

Kleanthi Sardeli, a data protection lawyer with Noyb, was clear about what this means for users: “Given that China is an authoritarian surveillance state, it is crystal clear that China doesn’t offer the same level of data protection as the EU. Transferring Europeans’ personal data is clearly unlawful—and must be terminated immediately.”

TikTok is not alone in facing such scrutiny. Noyb filed similar complaints against AliExpress, Xiaomi, Temu, Shein, and Tencent’s WeChat. All of these companies were accused of funneling user data from the EU to China, often without informing users or providing any assurance that their information would be kept safe.

A Global Surveillance Machine

The danger goes far beyond legal violations. Many experts believe TikTok functions as a powerful arm of the Chinese government’s information-gathering operations. Michael Sobolik, a China policy expert and author of Countering China’s Great Game, has warned that TikTok is “China’s greatest asymmetric advantage against America.” With more than 170 million users in the United States and 175 million in Europe, TikTok gives Beijing the ability to monitor and influence the thinking of hundreds of millions of people across the Western world.

Sobolik explained how the Chinese Communist Party can manipulate what users see on TikTok, either by promoting certain narratives or by suppressing others. “The CCP can direct TikTok to suppress or amplify content, effectively shaping public opinion on sensitive issues such as Tibet, the Uyghurs, and Tiananmen Square,” he said. He called the app a “tool for infiltrating our civil discourse,” and warned that it could even be used to sway elections or public policy debates.

In short, the concern is not just about data collection—it’s about psychological influence. The Chinese government, through ByteDance, potentially holds the power to shape how young people in America and Europe think, feel, and act.

In its response to the fine, TikTok pointed to its recent efforts to build a European data storage system called Project Clover. The company claims it has spent over €12 billion to ensure that EU user data stays in Europe, including the construction of new data centers in Finland and Norway. The company argued that the fine covers behavior that happened before these changes were in place.

“This ruling risks setting a precedent with far-reaching consequences for companies and entire industries across Europe that operate on a global scale,” TikTok said in a statement. It also claimed that only “limited user data—and no email or IP addresses—would be sent to China,” and that access would be policed by an outside auditor.

But regulators remained unconvinced. Despite the promises of better security, the Irish Data Protection Commission has given TikTok six months to stop all transfers of European user data to China unless it can prove the data is protected according to EU standards.

TikTok says it will appeal the decision, which could mean a yearslong court battle. Meanwhile, the company continues to face pressure from lawmakers in the United States. In April, President Trump granted the app a 75-day extension to find a new owner or face a nationwide ban. While some argue that banning the app infringes on free speech, experts like Sobolik disagree. “This is not about censorship,” he said. “It’s about protecting national security.”

The European Union’s decision to fine TikTok could be a turning point in how democracies respond to the threat of foreign-controlled digital platforms. If nothing is done, the Chinese government may continue to gather sensitive information about Western citizens, especially young people, and use it to further its own interests.

ACZ Editor: Tiktok will be an arm of Chinese intelligence forever, and in fact, by law Chinese citizens must cooperate with Chinese intelligence. As long as this is a Chinese owned company, China will continue to get the information. If necessary, a Chinese citizen can just walk into the data center, copy the data and carry it back.

Tiktok and other Chinese companies need to be restricted from operating in the West. It needs to happen now.