TikTok confirms appealing a €345M teen privacy fine by EU regulators from September in the EU General Court and is also locally challenging an order by Ireland
Stephanie Bodoni / Bloomberg :
Context & Ripple Effects
The appeal follows Ireland’s DPC finding that TikTok’s handling of children’s data breached GDPR and imposing a €345M penalty with a three-month compliance deadline in the September DPC decision. The case moves that enforcement action from regulator-led remediation into judicial review at the EU level.
TikTok is also contesting a separate Irish order locally, making the dispute a test of both the penalty and the scope of national enforcement measures against the platform.
First-order effects
- TikTok must defend the €345M fine before the EU General Court while separately pursuing its Irish challenge; the regulator’s findings and prescribed changes are now subject to litigation.
- Ireland’s DPC must substantiate its children’s-data enforcement approach in court, rather than treating the fine as a settled outcome.
Second-order effects
- The proceedings can clarify how GDPR obligations for minors are interpreted and defended in cross-border cases, giving other large platforms a closer read on litigation risk around children’s data practices.
- Extended challenges can make the timing and finality of privacy enforcement less predictable for regulated platforms and the authorities overseeing them.
Third-order effects
- If major platform penalties are routinely tested in court, GDPR enforcement will increasingly be shaped by judicial precedent as well as by data-protection authorities’ decisions.
- The case reflects a broader shift toward sustained legal contest over platform accountability, where compliance obligations may be negotiated through appeals rather than resolved at the initial regulatory decision.
The trend: European platform regulation is moving from headline enforcement actions toward court-tested rules on how large services handle sensitive user groups.