In the High Court of Ireland, TikTok Technology Limited challenges a €530M fine imposed by Ireland’s Data Protection Commission (DPC) over China-based staff’s access to European user data. The court largely upheld the DPC’s findings in June 2026 and upheld the fine in principle on June 30, 2026. It referred four fine-calculation questions to the Court of Justice of the European Union, which opened proceedings in September 2026.
Latest development Sep 15, 2026
On September 15, 2026, the Court of Justice of the European Union (CJEU) opened proceedings on four questions the High Court of Ireland referred on how TikTok’s €530M fine should be calculated. The fine and the suspension order remain stayed pending the reference.
Why it matters
The case tests how General Data Protection Regulation (GDPR) transfer rules apply when China-based staff remotely access European user data. The Court of Justice of the European Union reference will address how regulators calculate GDPR fines, affecting platforms with China-based operations and parallel Irish appeals, including WhatsApp’s.
Background
TikTok Technology Limited, the Irish subsidiary of China’s ByteDance, is challenging a €530M fine and enforcement order in the High Court of Ireland. Ireland’s Data Protection Commission (DPC) issued both as TikTok’s lead supervisory authority under the one-stop-shop mechanism of the General Data Protection Regulation (GDPR). In September 2021, the DPC opened an own-volition inquiry into remote access by China-based staff to European Economic Area (EEA) user data stored outside China.
On April 30, 2025, the DPC found that this remote access was an international data transfer under Chapter V of the GDPR. It held that TikTok had infringed Article 46(1) because it had not ensured that Chinese law offered protection equivalent to EU law. It also found a breach of Article 13(1)(f) because TikTok did not disclose the transfers to users before December 2022. It imposed fines of €485M and €45M for the two infringements and ordered TikTok to suspend the transfers within six months and bring its processing into compliance. TikTok appealed under section 142 of the Data Protection Act 2018, naming TikTok Information Technologies UK Limited as a co-applicant because that company would ultimately be liable for any fine.
On 11 grounds, TikTok argued that the DPC breached fair procedures, misapplied Article 46, reversed the burden of proof, and ignored safeguards in its €12B “Project Clover” data-localization program. The statutory appeal automatically stayed the fine, and on November 13, 2025, the High Court also stayed the suspension and compliance orders pending the appeal. The substantive hearing opened on March 3, 2026, and ran for roughly 10 days. On April 30, 2026, the Supreme Court of Ireland dismissed the DPC’s appeal against the stay. In a June 3, 2026, judgment ([2026] IEHC 347), the High Court (Mr Justice Rory Mulcahy) held that the DPC had not misdirected itself in law or misinterpreted Schrems II.
The court upheld most of the DPC’s findings on both breaches but remitted the corrective and suspension order because the DPC’s analysis of Project Clover was inadequate. The DPC confirmed on June 12, 2026, that it would not appeal. On June 30, 2026, the court gave the parties its separate judgment on the fine’s calculation ([2026] IEHC 419) and upheld the fine in principle. It referred four fining-methodology questions to the Court of Justice of the European Union (CJEU), which opened proceedings on September 15, 2026. The suspension order and the fine remain stayed.
Timeline 14 events
-
OrderCJEU opens proceedings on referred fine-calculation questions
The four questions came from the Irish High Court’s June 30, 2026, judgment. MLex reported that the Irish court had noted similar questions in a parallel Irish appeal brought by Meta’s WhatsApp.
Questions in TikTok's appeal over GDPR fine calculation land at EU court
-
JudgmentHigh Court refers fine-calculation questions to CJEU
In [2026] IEHC 419, the court upheld the €530M fine in principle and referred four fining-methodology questions to the Court of Justice of the European Union. It noted similar questions in a parallel WhatsApp challenge and other Irish privacy appeals.
TikTok Technology Limited v DPCHigh Court upheld EUR 530 million GDPR fine against TikTok and referred fining methodology questions to Court of Justice of the European UnionIrish DPC Won't Appeal Mostly Favorable Court Ruling on TikTok Data Transfers to China
-
OrderHigh Court shares reserved fine-calculation judgment with parties
The court circulated its separate judgment on TikTok’s appeal against the size of the €530M fine to TikTok and the DPC. Formal publication was left for a later date.
Data Protection Commission reconsidering TikTok data-transfer ban after court ruling – The Irish TimesIrish regulator reconsidering TikTok data-transfer ban after court rulingIrish regulator reconsidering TikTok data-transfer ban after court ruling
-
OrderDPC confirms it will not appeal the High Court ruling
The regulator said it accepted the June 2026 judgment, while the court signaled it may still refer some issues to the Court of Justice of the European Union.
Irish DPC Won't Appeal Mostly Favorable Court Ruling on TikTok Data Transfers to China
-
JudgmentHigh Court largely upholds DPC’s infringement findings
Mr Justice Mulcahy ruled that the DPC had not misinterpreted the GDPR or Schrems II. He remitted the suspension order to the DPC for further analysis of Project Clover and reserved judgment on the fine’s calculation.
Irish DPC Won't Appeal Mostly Favorable Court Ruling on TikTok Data Transfers to China
-
AppealSupreme Court dismisses DPC’s appeal on the stay
A five-judge Supreme Court unanimously held the legal test for the stay was a matter of national law and left the High Court’s stay in place.
Supreme Court finds for TikTok in dispute with Data Protection Commission
-
HearingSubstantive appeal hearing opens in the High Court
Barrister Paul Gallagher opened TikTok’s case, arguing the DPC needed a heightened sense of fair procedures given its enforcement powers.
TikTok challenge to DPC privacy breach finding opens before High Court
-
OrderHigh Court allows redaction of confidential appeal documents
The court permitted TikTok to redact commercially and technically sensitive material from roughly 6,000 pages of documents ahead of the substantive hearing.
TikTok can redact information from confidential documents in appeal against €530m DPC fine
-
OrderHigh Court stays suspension and compliance orders
Mr Justice Rory Mulcahy ruled TikTok would suffer serious, irreparable harm without a stay and paused the DPC’s suspension and corrective orders pending the appeal.
High Court continues stay on decision TikTok should stop transferring data to China
-
HearingTikTok seeks stay at High Court, citing $3B in losses
Counsel for TikTok told the High Court that complying with the DPC’s suspension order before the appeal was heard would cause billions of dollars in losses.
-
OrderHigh Court grants TikTok leave to proceed
Ms Justice Mary Rose Gearty granted TikTok permission on an ex parte basis to pursue its challenge to the DPC decision.
-
FilingTikTok files High Court appeal against the fine
TikTok Technology Limited lodged a statutory appeal against the DPC’s decision and enforcement orders.
-
OtherDPC fines TikTok €530M over China data transfers
The DPC found TikTok infringed Articles 46 and 13 of the GDPR, imposed fines of €485M and €45M, and ordered suspension of the transfers within six months.
TikTok fined 530 million euros by EU privacy watchdogs over China data transfer case
-
FilingDPC opens inquiry into TikTok’s China data transfers
The Data Protection Commission began an own-volition inquiry under section 110 of the Data Protection Act 2018 into TikTok’s transfers of EEA users’ personal data to China.
Tiktok Technology Limited & Anor v Data Protection Commission – 13 November 2025
Experimental AI forecast
How it is madeBy June 30, 2028, how will the CJEU answer the High Court’s fine-calculation reference in TikTok’s €530 million GDPR case?
- CJEU backs DPC’s fining approach34%
- Still pending on June 30, 202827%
- CJEU splits on fining questions22%
- CJEU answers favor TikTok13%
- Reference withdrawn or ended4%
- Resolves by
- Jun 30, 2028in 20 months
- Record confidence
- Medium
The CJEU is most likely to answer the reference in a way that supports the DPC’s fining methodology, at 34%, by June 30, 2028. Recent CJEU case law on GDPR fines has generally favored regulators, and the Irish court already upheld the fine in principle.
How it resolves. Resolves on the first CJEU judgment or reasoned order answering the four questions referred by the High Court in [2026] IEHC 419, as published on the CJEU website or Curia. “Backs DPC” if the answers, read as a whole, uphold the fining methodology the DPC used. “Splits” if some answers support the DPC’s method and at least one requires a material change. “Favors TikTok” if the main answers require the fine to be recalculated on a basis TikTok argued for. “Withdrawn or ended” if the reference is withdrawn, removed from the register, or declared inadmissible. “Still pending” if none of these has occurred by June 30, 2028.
Reasoning
Starting point. CJEU preliminary references take about 17 to 18 months on average, longer with an Advocate General opinion. Recent CJEU rulings on GDPR fines under Article 83 have mostly adopted the broader reading favored by supervisory authorities.
The reference class is CJEU preliminary rulings on GDPR fining questions. Proceedings opened on September 15, 2026, and average durations of about 17 to 18 months put a judgment near early to mid 2028. That leaves a real chance, about 27%, that the case is still pending on June 30, 2028, especially if an Advocate General opinion is ordered or the case is handled alongside the parallel WhatsApp questions. On the merits, recent CJEU rulings on Article 83 have tended to read fining powers broadly, which favors the DPC. The High Court also upheld the fine in principle, which suggests the referred points concern method rather than the core basis of the penalty. Four separate questions make a mixed answer plausible, so a split outcome is the leading alternative at 22%. A clear TikTok win is less likely given the case law trend. Withdrawal is unlikely because the DPC has accepted the judgment and the fine remains stayed, so TikTok has little reason to end the reference. Nothing in the record has changed since the previous forecast on the same question, so the numbers are unchanged.
CJEU case law trend favoring broad GDPR fining powers · Typical 17 to 18 month CJEU reference timeline · Four separate questions raise the chance of a mixed answer · Possible coordination with parallel WhatsApp fining questions · High Court already upheld the fine in principle
Generated automatically by Claude Opus 5.5 on Oct 10, 2026 from this case’s record on this site, and published without editorial review. The probabilities are the model’s judgment, not measured frequencies, and they are scored publicly as cases resolve. Not legal or investment advice. How the forecasts are made