The Irish Data Protection Commission (DPC) has launched an investigation into TikTok concerning the transfer of European users' personal data to servers in China, amid concerns that TikTok failed to prove Chinese data storage met EU standards.

This investigation follows a recent €345 million fine in 2023 for violations related to minors' data, and TikTok has not yet responded to requests for comment.

The EU's strict regulations restrict data transfer to countries deemed secure, and TikTok's inability to demonstrate compliance has intensified scrutiny.

The probe coincides with ongoing discussions in the United States about potential bans or forced divestment of TikTok, highlighting a broader global debate over the app's data practices.

TikTok has not made any public statements regarding the new EU investigation, which poses challenges to its efforts to build trust through initiatives like Project Clover, aimed at localizing EU user data.

The investigation comes shortly after TikTok's unsuccessful appeal against a £12.7 million penalty from the UK Information Commissioner's Office in 2023.

In the US, TikTok faces legislative pressure, with laws passed in 2024 requiring ByteDance to divest control of its US operations or face a potential ban, amidst ongoing investigations and threats of restrictions.

TikTok plans to appeal the €530 million fine and denies collaborating with Chinese authorities, though concerns about safeguarding user data from Chinese access persist.

TikTok promotes its data protection efforts, including Project Clover, which involves a €12 billion investment in European data security over the next decade, asserting that user data is stored primarily in Norway, Ireland, and the US.

The EU's investigation was triggered by TikTok's disclosure that its internal systems flagged unauthorized data storage in China earlier this year under Project Clover.

The EU has been actively imposing substantial fines on tech companies to enforce compliance with privacy, competition, and taxation regulations, reflecting a broader crackdown on data governance.