TikTok, AliExpress, and WeChat Face GDPR Complaints Over Data Access Failures

Written by Jeremy Werner

Jeremy is an experienced journalist, skilled communicator, and constant learner with a passion for storytelling and a track record of crafting compelling narratives. He has a diverse background in broadcast journalism, AI, public relations, data science, and social media management.
Posted on 07/21/2025
In News

Privacy advocacy group noyb has filed formal complaints against TikTok, AliExpress, and WeChat for violating European Union data protection laws. The complaints allege the companies failed to comply with users’ access requests under Article 15 of the General Data Protection Regulation (GDPR), denying Europeans their fundamental right to understand how their personal data is used.

 

According to noyb, TikTok delivered incomplete and confusing data in response to a request. Meanwhile AliExpress provided a corrupted file that could only be opened once. WeChat did not respond at all. All three are accused of ignoring follow-up queries and instead sending generic privacy policies with no specific user data.

 

“These companies aggressively collect data but refuse to provide users with the full picture, as required by EU law,” said Kleanthi Sardeli, a data protection lawyer at noyb.

 

The access requests were originally submitted as part of a broader investigation into potential illegal data transfers to China. EU law prohibits data transfers to countries where privacy protections are inadequate. While other Chinese tech firms, including SHEIN and Temu, eventually cooperated, TikTok, AliExpress, and WeChat remained noncompliant.

 

The complaints have been filed with data protection authorities in Belgium, Greece, and the Netherlands. noyb is calling for formal findings of GDPR violations, enforcement of data access rights, and administrative fines. Under GDPR, penalties can reach up to 4% of a company’s global revenue. That amount that could total €147 million for AliExpress alone.

 

“Just because these companies receive many requests doesn’t mean they’re allowed to violate the law,” Sardeli said.

 

The case marks a new escalation in European efforts to hold non-EU tech giants accountable for data privacy violations.

 

Need Help?

 

If you have questions or concerns about any EU guidelines, regulations and laws, don’t hesitate to reach out to BABL AI. Their Audit Experts can offer valuable insight, and ensure you’re informed and compliant.

Subscribe to our Newsletter

Keep up with the latest on BABL AI, AI Auditing and
AI Governance News by subscribing to our news letter