Ireland's Data Protection Commission which is European Union's lead data privacy regulator has opened investigations into&nbsp;<a href="https://www.wionews.com/south-asia/shameful-act-pakistan-govt-condemns-sexual-assault-on-tiktok-star-by-400-men-406908">TikTok's</a> alleged processing of children’s personal data and the reported transfer&nbsp;of personal data to China.

TikTok which is owned by China's ByteDance had earlier announced policy to tighten privacy control related to&nbsp;teenagers after it allegedly failed to protect children from inappropriate content.

According to the data protection commission, the probes involve "processing of personal data in the context of platform settings for users under age 18 and age verification measures for persons under 13" under the General Data Protection Regulation (GDPR).

Watch:

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/gravitas-facebook-knew-instagram-is-toxic-for-teenagers-413345/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

The data protection regulator&nbsp;is also probing whether <a href="https://www.wionews.com/south-asia/they-tore-my-clothes-woman-tiktok-star-assaulted-by-hundreds-in-lahore-on-pakistans-independence-day-406486">TikTok </a>complied with EU data law in its alleged transfer of personal data to countries outside the block namely to China.

TikTok however claimed that "privacy and safety" of "our youngest members, is our highest priority".

The data protection regulator based in Ireland can impose fines of up to 4 per cent of global revenue even as TikTok claimed it had implemented policies to safeguard user data. The regulator had earlier imposed $265 million fine on Facebook's WhatsApp over a data breach issue.

TikTok reportedly has over 800 million users worldwide with large advertising revenue. In July, the Dutch Data Protection Authority(DPA) had imposed a €725,000 fine on TikTok for allegedly violating the privacy of young children.

Reports said TikTok carried out a number of changes to make the app safe for children after the Dutch regulator's move.

The probe conducted by Dutch authorities had concluded that TikTok had breached EU's General Data Protection Regulation&nbsp;transparency principle.

The Dutch DPA had found that TikTok had put its notice in English which could not be read easily by users as GDPR asserted that “children merit specific protection.”

(With inputs from Agencies)

Ireland's Data Protection Commission which is European Union's lead data privacy regulator has opened investigations into TikTok's alleged processing of children’s personal data and the reported transfer of personal data to China.

Ireland's Data Protection Commission which is European Union's lead data privacy regulator has opened investigations into TikTok's alleged processing of children’s personal data and the reported transfer of personal data to China. TikTok which is owned by China's ByteDance had earlier announced policy to tighten privacy control related to teenagers after it allegedly failed to protect children from inappropriate content. According to the data protection commission, the probes involve "processing of personal data in the context of platform settings for users under age 18 and age verification measures for persons under 13" under the General Data Protection Regulation (GDPR). Watch: The data protection regulator is also probing whether TikTok complied with EU data law in its alleged transfer of personal data to countries outside the block namely to China. TikTok however claimed that "privacy and safety" of "our youngest members, is our highest priority". The data protection regulator based in Ireland can impose fines of up to 4 per cent of global revenue even as TikTok claimed it had implemented policies to safeguard user data. The regulator had earlier imposed $265 million fine on Facebook's WhatsApp over a data breach issue. TikTok reportedly has over 800 million users worldwide with large advertising revenue. In July, the Dutch Data Protection Authority(DPA) had imposed a €725,000 fine on TikTok for allegedly violating the privacy of young children. Reports said TikTok carried out a number of changes to make the app safe for children after the Dutch regulator's move. The probe conducted by Dutch authorities had concluded that TikTok had breached EU's General Data Protection Regulation transparency principle. The Dutch DPA had found that TikTok had put its notice in English which could not be read easily by users as GDPR asserted that “children merit specific protection.” (With inputs from Agencies)

EU regulator investigates TikTok over child policy, data transfer to China

An Australian regulator has filed a lawsuit against Alphabet Inc's&nbsp;<a href="https://www.wionews.com/business-economy/google-unveils-quantum-computer-breakthrough-critics-say-wait-a-qubit-257805">Google</a>, accusing it of misleading smartphone users about how it collected and used personal location data, advancing a global crackdown on the world's biggest tech firms.

The Australian Competition and Consumer Commission&nbsp;said the local Google unit did not tell users of its Android operating system for almost two years that they needed to switch off two settings - not one - if they did not want the company to keep their information.

"Google's conduct caused users to understand that personal data about their location was not being obtained ... by Google when in fact personal data was being obtained," the ACCC wrote in a Federal Court filing on Tuesday, which it published on its website.

"The misleading information provided by Google meant that users were not able to make an informed choice."

The lawsuit is the first of several the ACCC said it would pursue against the local arms of global technology companies like Google and social media firm <a href="https://www.wionews.com/business-economy/facebooks-news-tab-seeks-to-reboot-its-role-within-media-258245">Facebook Inc</a>&nbsp;when it called for tougher laws concerning privacy and content-sharing.

Already European Union countries have seized on the bloc's new General Data Protection Regulation (GDPR) rules to rein in big technology companies. In January, a French regulator fined Google 50 million euros&nbsp;for breaches of privacy laws.

Ireland's Data Protection Commissioner is also investigating Google over a complaint alleging breach of privacy laws, while Facebook agreed in July to a record-breaking $5 billion fine in the United States to resolve privacy concerns dating back to its use of people's data in the 2016 presidential election.

The Australian lawsuit against Google is seeking unspecified penalties and orders requiring the publication of corrective notices by Google, the ACCC said.

The Australian regulator said in its lawsuit that Google failed to make clear that people should turn off two location-based settings, "Location History" and "Web &amp; App Activity", to stop the company collecting and using data from either.

Google further misled consumers - and breached Australian consumer law - by telling them the only way to prevent the company from collecting their location data was to stop using its main services like Google Search and <a href="https://www.wionews.com/world/google-offers-incognito-mode-for-maps-in-privacy-push-253314">Google Maps</a>, the regulator said.

"As a result of these on-screen representations, Google has collected, kept and used highly sensitive and valuable personal information about consumers' location without them making an informed choice," ACCC Chair Rod Sims said in a statement.

"Many consumers make a conscious decision to turn off settings to stop the collection of their location data, but we allege that Google's conduct may have prevented consumers from making that choice."

A representative for Google in Australia did not respond to an emailed request for comment.

The matter is scheduled for a case management hearing on November&nbsp;14, according to the Federal Court website.

An Australian regulator has filed a lawsuit against Alphabet Inc's Google, accusing it of misleading smartphone users about how it collected and used personal location data, advancing a global crackdown on the world's biggest tech firms.

An Australian regulator has filed a lawsuit against Alphabet Inc's Google, accusing it of misleading smartphone users about how it collected and used personal location data, advancing a global crackdown on the world's biggest tech firms. The Australian Competition and Consumer Commission said the local Google unit did not tell users of its Android operating system for almost two years that they needed to switch off two settings - not one - if they did not want the company to keep their information. "Google's conduct caused users to understand that personal data about their location was not being obtained ... by Google when in fact personal data was being obtained," the ACCC wrote in a Federal Court filing on Tuesday, which it published on its website. "The misleading information provided by Google meant that users were not able to make an informed choice." The lawsuit is the first of several the ACCC said it would pursue against the local arms of global technology companies like Google and social media firm Facebook Inc when it called for tougher laws concerning privacy and content-sharing. Already European Union countries have seized on the bloc's new General Data Protection Regulation (GDPR) rules to rein in big technology companies. In January, a French regulator fined Google 50 million euros for breaches of privacy laws. Ireland's Data Protection Commissioner is also investigating Google over a complaint alleging breach of privacy laws, while Facebook agreed in July to a record-breaking $5 billion fine in the United States to resolve privacy concerns dating back to its use of people's data in the 2016 presidential election. The Australian lawsuit against Google is seeking unspecified penalties and orders requiring the publication of corrective notices by Google, the ACCC said. The Australian regulator said in its lawsuit that Google failed to make clear that people should turn off two location-based settings, "Location History" and "Web & App Activity", to stop the company collecting and using data from either. Google further misled consumers - and breached Australian consumer law - by telling them the only way to prevent the company from collecting their location data was to stop using its main services like Google Search and Google Maps, the regulator said. "As a result of these on-screen representations, Google has collected, kept and used highly sensitive and valuable personal information about consumers' location without them making an informed choice," ACCC Chair Rod Sims said in a statement. "Many consumers make a conscious decision to turn off settings to stop the collection of their location data, but we allege that Google's conduct may have prevented consumers from making that choice." A representative for Google in Australia did not respond to an emailed request for comment. The matter is scheduled for a case management hearing on November 14, according to the Federal Court website.

Australian regulator files privacy suit against Google alleging location data misuse

France's data watchdog on Monday announced a fine of 50 million euros ($57 million) for US search giant Google, using the EU's strict General Data Protection Regulation (GDPR) for the first time.

Google was handed the record fine from the CNIL regulator for failing to provide transparent and easily accessible information on its data consent policies, a statement said.

The CNIL said Google made it too difficult for users to understand and manage preferences on how their personal information is used, in particular with regards to targeted advertising.

"People expect high standards of transparency and control from us. We're deeply committed to meeting those expectations and the consent requirements of the GDPR," a Google spokesperson said in a statement.

"We're studying the decision to determine our next steps."&nbsp;

The ruling follows complaints lodged by two advocacy groups last May, shortly after the landmark GDPR directive came into effect.

One was filed on behalf of some 10,000 signatories by France's Quadrature du Net group, while the other was by None Of Your Business, created by the Austrian privacy activist Max Schrems.

Schrems had accused Google of securing "forced consent" through the use of pop-up boxes online or on its apps which imply that its services will not be available unless people accept its conditions of use.

"Also, the information provided is not sufficiently clear for the user to understand the legal basis for targeted advertising is consent, and not Google's legitimate business interests," the CNIL said.

France's data watchdog on Monday announced a fine of 50 million euros ($57 million) for US search giant Google, using the EU's strict General Data Protection Regulation (GDPR) for the first time.

France's data watchdog on Monday announced a fine of 50 million euros ($57 million) for US search giant Google, using the EU's strict General Data Protection Regulation (GDPR) for the first time. Google was handed the record fine from the CNIL regulator for failing to provide transparent and easily accessible information on its data consent policies, a statement said. The CNIL said Google made it too difficult for users to understand and manage preferences on how their personal information is used, in particular with regards to targeted advertising. "People expect high standards of transparency and control from us. We're deeply committed to meeting those expectations and the consent requirements of the GDPR," a Google spokesperson said in a statement. "We're studying the decision to determine our next steps." The ruling follows complaints lodged by two advocacy groups last May, shortly after the landmark GDPR directive came into effect. One was filed on behalf of some 10,000 signatories by France's Quadrature du Net group, while the other was by None Of Your Business, created by the Austrian privacy activist Max Schrems. Schrems had accused Google of securing "forced consent" through the use of pop-up boxes online or on its apps which imply that its services will not be available unless people accept its conditions of use. "Also, the information provided is not sufficiently clear for the user to understand the legal basis for targeted advertising is consent, and not Google's legitimate business interests," the CNIL said.

France uses new European Union data law to fine Google 50 million euros

The EU’s new data regulation is slated to come into effect this week on May 25. The General Data Protection Regulation (GDPR) promises more power to individuals and puts companies with a large pool of user data under the scanner.

This means that with the new regulation coming into force, individuals can now demand companies to reveal or delete their personal data.

The law will replace the 1995 Data Protection Directive and will finally be put to practice after seven years of debate.&nbsp

The GDPR will primarily have companies under its purview, firms of all kinds ranging from technology, banking, to advertising among others. The lot that is likely to bear the most brunt includes companies that primarily deal with acquiring and exploiting large-scale consumer data.

Companies will now need to practice utmost transparency while dealing with consumer data. Consent will have paramount significance, without consumer consent it will now be difficult for companies to process an individual's personal information.&nbsp

The GDPR rollout, this Friday, will mean that users will have the power to hold companies accountable for data breach like never before. Tech giants will now be pressured into changing policies and ushering in new measures that would provide more transparency with respect to the usage and processing of user information that they collect.&nbsp

Facebook, for instance, recently introduced tools that let its users manage, control, edit, review, download and delete information that is shared on/with Facebook as well as with third-party entities.&nbsp

GDPR has ambitious goals to achieve, whether or not it will work to avoid events like the Facebook-Cambridge Analytica episode is for all of us to see. The new regulation will have companies on their toes, cautious like never before as they face the risk of paying as much as 4% of their global turnover as a fine for violating the regulation.&nbsp

Companies will now need to practice utmost transparency while dealing with consumer data

The EU’s new data regulation is slated to come into effect this week on May 25. The General Data Protection Regulation (GDPR) promises more power to individuals and puts companies with a large pool of user data under the scanner. This means that with the new regulation coming into force, individuals can now demand companies to reveal or delete their personal data. The law will replace the 1995 Data Protection Directive and will finally be put to practice after seven years of debate. The GDPR will primarily have companies under its purview, firms of all kinds ranging from technology, banking, to advertising among others. The lot that is likely to bear the most brunt includes companies that primarily deal with acquiring and exploiting large-scale consumer data. Companies will now need to practice utmost transparency while dealing with consumer data. Consent will have paramount significance, without consumer consent it will now be difficult for companies to process an individual's personal information. The GDPR rollout, this Friday, will mean that users will have the power to hold companies accountable for data breach like never before. Tech giants will now be pressured into changing policies and ushering in new measures that would provide more transparency with respect to the usage and processing of user information that they collect. Facebook, for instance, recently introduced tools that let its users manage, control, edit, review, download and delete information that is shared on/with Facebook as well as with third-party entities. GDPR has ambitious goals to achieve, whether or not it will work to avoid events like the Facebook-Cambridge Analytica episode is for all of us to see. The new regulation will have companies on their toes, cautious like never before as they face the risk of paying as much as 4% of their global turnover as a fine for violating the regulation.

What is GDPR? EU's new data regulation law may choke tech giants

If a new European law restricting what companies can do with people's online data went into effect tomorrow, almost 1.9 billion Facebook Inc users around the world would be protected by it. The online social network is making changes that ensure the number will be much smaller.

Facebook members outside the United States and Canada, whether they know it or not, are currently governed by terms of service agreed with the company's international headquarters in Ireland.

Next month, Facebook is planning to make that the case for only European users, meaning 1.5 billion members in Africa, Asia, Australia and Latin America will not fall under the European Union's General Data Protection Regulation (GDPR), which takes effect on May 25.

The previously unreported move, which Facebook confirmed to Reuters on Tuesday, shows the world's largest online social network is keen to reduce its exposure to GDPR, which allows European regulators to fine companies for collecting or using personal data without users' consent.

That removes a huge potential liability for Facebook, as the new EU law allows for fines of up to 4 percent of global annual revenue for infractions, which in Facebook's case could mean billions of dollars.

The change comes as Facebook is under scrutiny from regulators and lawmakers around the world since disclosing last month that the personal information of millions of users wrongly ended up in the hands of political consultancy Cambridge Analytica, setting off wider concerns about how it handles user data.

The change affects more than 70 percent of Facebook's 2 billion-plus members. As of December, Facebook had 239 million users in the United States and Canada, 370 million in Europe and 1.52 billion users elsewhere.

Facebook, like many other U.S. technology companies, established an Irish subsidiary in 2008 and took advantage of the country's low corporate tax rates, routing through it revenue from some advertisers outside North America. The unit is subject to regulations applied by the 28-nation European Union.

Facebook said the latest change does not have tax implications.

'IN SPIRIT'

In a statement given to Reuters, Facebook played down the importance of the terms of service change, saying it plans to make the privacy controls and settings that Europe will get under GDPR available to the rest of the world.

"We apply the same privacy protections everywhere, regardless of whether your agreement is with Facebook Inc or Facebook Ireland," the company said.

Earlier this month, Facebook Chief Executive Mark Zuckerberg told Reuters in an interview that his company would apply the EU law globally "in spirit," but stopped short of committing to it as the standard for the social network across the world.

In practice, the change means the 1.5 billion affected users will not be able to file complaints with Ireland's Data Protection Commissioner or in Irish courts. Instead they will be governed by more lenient U.S. privacy laws, said Michael Veale, a technology policy researcher at University College London.

Facebook will have more leeway in how it handles data about those users, Veale said. Certain types of data such as browsing history, for instance, are considered personal data under EU law but are not as protected in the United States, he said.

The company said its rationale for the change was related to the European Union's mandated privacy notices, "because EU law requires specific language." For example, the company said, the new EU law requires specific legal terminology about the legal basis for processing data which does not exist in U.S. law.

NO WARNING

Ireland was unaware of the change. One Irish official, speaking on condition of anonymity, said he did not know of any plans by Facebook to transfer responsibilities wholesale to the United States or to decrease Facebook's presence in Ireland, where the social network is seeking to recruit more than 100 new staff.

Facebook released a revised terms of service in draft form two weeks ago, and they are scheduled to take effect next month.

Other multinational companies are also planning changes. LinkedIn, a unit of Microsoft Corp, tells users in its existing terms of service that if they are outside the United States, they have a contract with LinkedIn Ireland. New terms that take effect May 8 move non-Europeans to contracts with U.S.-based LinkedIn Corp.

LinkedIn said in a statement on Wednesday that all users are entitled to the same privacy protections. "We've simply streamlined the contract location to ensure all members understand the LinkedIn entity responsible for their personal data," the company said.

The European Union's General Data Protection Regulation, restricting what companies can do with people's online data, will take effect on May 25

If a new European law restricting what companies can do with people's online data went into effect tomorrow, almost 1.9 billion Facebook Inc users around the world would be protected by it. The online social network is making changes that ensure the number will be much smaller. Facebook members outside the United States and Canada, whether they know it or not, are currently governed by terms of service agreed with the company's international headquarters in Ireland. Next month, Facebook is planning to make that the case for only European users, meaning 1.5 billion members in Africa, Asia, Australia and Latin America will not fall under the European Union's General Data Protection Regulation (GDPR), which takes effect on May 25. The previously unreported move, which Facebook confirmed to Reuters on Tuesday, shows the world's largest online social network is keen to reduce its exposure to GDPR, which allows European regulators to fine companies for collecting or using personal data without users' consent. That removes a huge potential liability for Facebook, as the new EU law allows for fines of up to 4 percent of global annual revenue for infractions, which in Facebook's case could mean billions of dollars. The change comes as Facebook is under scrutiny from regulators and lawmakers around the world since disclosing last month that the personal information of millions of users wrongly ended up in the hands of political consultancy Cambridge Analytica, setting off wider concerns about how it handles user data. The change affects more than 70 percent of Facebook's 2 billion-plus members. As of December, Facebook had 239 million users in the United States and Canada, 370 million in Europe and 1.52 billion users elsewhere. Facebook, like many other U.S. technology companies, established an Irish subsidiary in 2008 and took advantage of the country's low corporate tax rates, routing through it revenue from some advertisers outside North America. The unit is subject to regulations applied by the 28-nation European Union. Facebook said the latest change does not have tax implications. 'IN SPIRIT' In a statement given to Reuters, Facebook played down the importance of the terms of service change, saying it plans to make the privacy controls and settings that Europe will get under GDPR available to the rest of the world. "We apply the same privacy protections everywhere, regardless of whether your agreement is with Facebook Inc or Facebook Ireland," the company said. Earlier this month, Facebook Chief Executive Mark Zuckerberg told Reuters in an interview that his company would apply the EU law globally "in spirit," but stopped short of committing to it as the standard for the social network across the world. In practice, the change means the 1.5 billion affected users will not be able to file complaints with Ireland's Data Protection Commissioner or in Irish courts. Instead they will be governed by more lenient U.S. privacy laws, said Michael Veale, a technology policy researcher at University College London. Facebook will have more leeway in how it handles data about those users, Veale said. Certain types of data such as browsing history, for instance, are considered personal data under EU law but are not as protected in the United States, he said. The company said its rationale for the change was related to the European Union's mandated privacy notices, "because EU law requires specific language." For example, the company said, the new EU law requires specific legal terminology about the legal basis for processing data which does not exist in U.S. law. NO WARNING Ireland was unaware of the change. One Irish official, speaking on condition of anonymity, said he did not know of any plans by Facebook to transfer responsibilities wholesale to the United States or to decrease Facebook's presence in Ireland, where the social network is seeking to recruit more than 100 new staff. Facebook released a revised terms of service in draft form two weeks ago, and they are scheduled to take effect next month. Other multinational companies are also planning changes. LinkedIn, a unit of Microsoft Corp, tells users in its existing terms of service that if they are outside the United States, they have a contract with LinkedIn Ireland. New terms that take effect May 8 move non-Europeans to contracts with U.S.-based LinkedIn Corp. LinkedIn said in a statement on Wednesday that all users are entitled to the same privacy protections. "We've simply streamlined the contract location to ensure all members understand the LinkedIn entity responsible for their personal data," the company said.

New privacy law coming, Facebook working to keep 1.5 billion users out of its reach

gdpr

Gdpr, News on Gdpr, stories on Gdpr, articles on Gdpr, Gdpr stories at Wion, Gdpr news, Gdpr latest news