TikTok’s first European data centre comes online to combat privacy fears

The Dublin site is the first of three which will house the data of European TikTok users, in response to data privacy concerns around the app.

Martyn Landi
Tuesday 05 September 2023 07:00 EDT
TikTok is owned by Chinese firm ByteDance (PA)
TikTok is owned by Chinese firm ByteDance (PA) (PA Wire)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

TikTok has confirmed that its first European data centre in Ireland is now operational and the social media giant has begun to migrate European user data to the site, as part of its ongoing response to data privacy concerns around the app’s links to China.

The centre in Dublin is the first of three in Europe to be built and will house data from TikTok users from across the European Economic Area (EEA), the UK and Switzerland.

The social media giant’s construction of the centres comes as it faces ongoing scrutiny from regulators around the world over its links to China.

TikTok, which is owned by Chinese firm ByteDance, has long said it does not share data with China, but critics fear it could be compelled to expose data to Beijing, with growing concerns about how President Xi Jinping’s administration could use technology against the West.

We've committed to storing our European user data locally by default, by establishing three new data centres in Europe

Theo Bertram, of TikTok

Earlier this year, the UK Government banned ministers from using the video-sharing app on their work phones following a security review, and a number of other governments around the world have also introduced similar bans.

As part of an initiative called Project Clover, TikTok had set out plans to build three new data centres in Europe – two in Ireland and one in Norway – to enable more local data storage, reduce data transfers across regions and reduce employee access to user data as part of its response to privacy fears.

In an update on the project and alongside the announcement of the first data centre coming online, TikTok vice president for public policy in Europe, Theo Bertram, said a third-party security company would also be used to independently audit TikTok’s work at the data centre.

“We’ve committed to storing our European user data locally by default, by establishing three new data centres in Europe,” Mr Bertram said in a blog post.

“Our first data centre in Dublin, Ireland, is now operational and migration of European user data to the centre has begun. The other two data centres in Norway and Ireland are under construction.

“We have engaged a third-party European security company to independently audit our data controls and protections, monitor data flows, provide independent verification, and report any incidents. We are pleased to announce that NCC Group will conduct this oversight of our data security measures.”

Mr Bertram added that the NCC Group would independently validate that only approved employees can access limited data types and carry out a number of other security controls.

“All of these controls and operations are designed to ensure that the data of our European users is safeguarded in a specially-designed protective environment, and can only be accessed by approved employees subject to strict independent oversight and verification,” he said.

Stephen Bailey, global director of privacy at NCC Group, said the set-up means European and UK TikTok users “can have confidence in the enhanced data security standards that TikTok is setting, which go above and beyond European regulatory requirements”.

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in