TikTok Technology Limited is challenging a €530M fine and suspension order issued by Ireland’s Data Protection Commission (DPC) in the High Court of Ireland. The DPC found that remote access by China-based staff to European Economic Area user data breached the GDPR. On June 3, 2026, the court largely upheld those findings, remitted the suspension order to the DPC, and reserved its ruling on the fine, which remains stayed.
Latest development Jun 3, 2026
On June 3, 2026, the High Court largely upheld the DPC’s findings that TikTok breached Articles 46 and 13 of the GDPR ([2026] IEHC 347). It remitted the suspension order to the DPC for further analysis of Project Clover and reserved judgment on the calculation of the fine.
Why it matters
The case will decide how the GDPR’s transfer rules apply when staff in China remotely access EEA user data, and what weight safeguards such as Project Clover carry. The outcome affects cross-border transfer enforcement against platforms with China-based operations across the EU.
Background
TikTok Technology Limited, the Irish subsidiary of China’s ByteDance, is challenging a €530M fine and enforcement order in the High Court of Ireland. Ireland’s Data Protection Commission (DPC) issued them as TikTok’s lead supervisory authority under the one-stop-shop mechanism of the General Data Protection Regulation (GDPR). In September 2021, the DPC opened an own-volition inquiry into TikTok’s practice of allowing China-based staff to remotely access the personal data of European Economic Area (EEA) users stored outside China. On April 30, 2025, the DPC found that this remote access was an international data transfer under GDPR Chapter V. It held that TikTok had infringed Article 46(1) by failing to ensure that Chinese law offered protection equivalent to EU law. It also found a breach of Article 13(1)(f) because TikTok did not disclose the transfers to users before December 2022. The DPC imposed fines of €485M and €45M respectively. It ordered TikTok to suspend the transfers within six months and bring its processing into compliance.
TikTok appealed under section 142 of the Data Protection Act 2018. It named TikTok Information Technologies UK Limited as a co-applicant because that company would ultimately be liable for any fine. On 11 grounds, TikTok argued that the DPC breached fair procedures, misapplied Article 46, and reversed the burden of proof. It also contended that the DPC ignored the safeguards built into its €12B “Project Clover” data-localization program. The statutory appeal automatically stayed the fine but not the suspension and compliance orders. TikTok therefore sought a separate stay of those orders pending its appeal, which the High Court granted on November 13, 2025. The DPC challenged the stay before the Supreme Court of Ireland, which dismissed its appeal on April 30, 2026.
The substantive hearing opened on March 3, 2026, and ran for roughly 10 days. On June 3, 2026, the High Court (Mr Justice Rory Mulcahy) delivered judgment ([2026] IEHC 347). The court held that the DPC did not misdirect itself in law or misinterpret the Schrems II jurisprudence of the Court of Justice of the European Union (CJEU). It upheld most of the DPC’s findings on the Article 46 and Article 13 breaches. However, it found inadequate the DPC’s analysis of how Project Clover bears on the suspension order. The court remitted the corrective and suspension order to the DPC for further consideration and reserved a separate ruling on the calculation of the fine. On June 12, 2026, the DPC confirmed it would not appeal the judgment.
The suspension order and the €530M fine both remain stayed. The High Court has yet to rule on the quantum of the fine, and it may refer some issues to the CJEU.
Timeline 11 events
-
OrderDPC confirms it will not appeal the High Court ruling
The regulator said it accepted the June 2026 judgment, while the court signaled it may still refer some issues to the Court of Justice of the European Union.
Irish DPC Won't Appeal Mostly Favorable Court Ruling on TikTok Data Transfers to China
-
JudgmentHigh Court largely upholds DPC’s infringement findings
Mr Justice Mulcahy ruled that the DPC had not misinterpreted the GDPR or Schrems II. He remitted the suspension order to the DPC for further analysis of Project Clover and reserved judgment on the fine’s calculation.
Irish DPC Won't Appeal Mostly Favorable Court Ruling on TikTok Data Transfers to China
-
AppealSupreme Court dismisses DPC’s appeal on the stay
A five-judge Supreme Court unanimously held the legal test for the stay was a matter of national law and left the High Court’s stay in place.
Supreme Court finds for TikTok in dispute with Data Protection Commission
-
HearingSubstantive appeal hearing opens in the High Court
Barrister Paul Gallagher opened TikTok’s case, arguing the DPC needed a heightened sense of fair procedures given its enforcement powers.
TikTok challenge to DPC privacy breach finding opens before High Court
-
OrderHigh Court allows redaction of confidential appeal documents
The court permitted TikTok to redact commercially and technically sensitive material from roughly 6,000 pages of documents ahead of the substantive hearing.
TikTok can redact information from confidential documents in appeal against €530m DPC fine
-
OrderHigh Court stays suspension and compliance orders
Mr Justice Rory Mulcahy ruled TikTok would suffer serious, irreparable harm without a stay and paused the DPC’s suspension and corrective orders pending the appeal.
High Court continues stay on decision TikTok should stop transferring data to China
-
HearingTikTok seeks stay at High Court, citing $3B in losses
Counsel for TikTok told the High Court that complying with the DPC’s suspension order before the appeal was heard would cause billions of dollars in losses.
-
OrderHigh Court grants TikTok leave to proceed
Ms Justice Mary Rose Gearty granted TikTok permission on an ex parte basis to pursue its challenge to the DPC decision.
-
FilingTikTok files High Court appeal against the fine
TikTok Technology Limited lodged a statutory appeal against the DPC’s decision and enforcement orders.
-
OtherDPC fines TikTok €530M over China data transfers
The DPC found TikTok infringed Articles 46 and 13 of the GDPR, imposed fines of €485M and €45M, and ordered suspension of the transfers within six months.
TikTok fined 530 million euros by EU privacy watchdogs over China data transfer case
-
FilingDPC opens inquiry into TikTok’s China data transfers
The Data Protection Commission began an own-volition inquiry under section 110 of the Data Protection Act 2018 into TikTok’s transfers of EEA users’ personal data to China.
Tiktok Technology Limited & Anor v Data Protection Commission – 13 November 2025
Experimental AI forecast
How it is madeBy June 30, 2027, how will the High Court of Ireland rule on the reserved question of TikTok’s €530 million GDPR fine?
- High Court confirms €530M fine35%
- Still pending on June 30, 202732%
- High Court reduces or remits the fine30%
- High Court sets aside TikTok’s fine3%
- Resolves by
- Jun 30, 2027in 9 months
- Record confidence
- Medium
The High Court most likely confirms the €530 million fine by June 30, 2027 (35%). A reduction or remittal (30%) and a still-pending outcome (32%) are close behind. The strongest reason is that the court already upheld most of the DPC’s infringement findings on June 3, 2026, which leaves little room to set the fine aside.
How it resolves. Resolves on the High Court’s published ruling on the fine in TikTok’s section 142 appeal, as shown in court records or reliable press reports. “Confirms” means the court upholds fines totaling €530 million. “Reduces or remits” means the court lowers the total, or sends the fine back to the DPC for recalculation. “Sets aside” means the court annuls the fines entirely. If no such ruling has issued by June 30, 2027, including where the court has referred questions to the CJEU, the outcome is “still pending.”
Reasoning
Starting point. National court appeals against large GDPR fines where the underlying infringement findings have been upheld: Courts reviewing EU data protection fines usually confirm them once liability stands, with roughly a quarter to a third reduced on proportionality or calculation grounds, based on a small sample.
When courts uphold the underlying GDPR infringements, fine challenges usually turn on calculation and proportionality, and most fines survive in full or with modest cuts. Here the June 3, 2026, judgment rejected TikTok’s core legal arguments on Article 46, Article 13, and Schrems II, so outright annulment of the fine is a long shot. The DPC’s decision not to appeal fixes the liability findings in place. The remittal of the suspension order for further analysis of Project Clover gives TikTok a hook for proportionality arguments on quantum, which supports a meaningful chance of a reduction or remittal. The largest source of uncertainty is timing. The court signaled it may refer issues to the CJEU, and a preliminary reference typically takes well over a year, which would push any ruling past June 30, 2027. The judgment on quantum has already been reserved for about four months, so a ruling within the window is likely if no reference is made. The leading alternative to confirmation is a pending case driven by a CJEU reference.
High Court upheld most infringement findings on June 3, 2026 · Possible CJEU reference would delay the fine ruling · Project Clover remittal may support proportionality arguments · DPC accepted the judgment, fixing liability findings · Fine remains automatically stayed, reducing pressure to settle
Generated automatically by Claude Opus 5.5 on Sep 26, 2026 from this case’s record on this site, and published without editorial review. The probabilities are the model’s judgment, not measured frequencies, and they are scored publicly as cases resolve. Not legal or investment advice. How the forecasts are made