News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

How TikTok, AliExpress & WeChat ignore your GDPR rights

Data Subject Rights Today, noyb has filed GDPR complaints against AliExpress, TikTok and WeChat.

Social Media Right of Access Procedures Personal Data AI Value Chain Actors and Roles
Jul 17, 2025 Source noyb.eu

Full text

Data Subject Rights Today, noyb has filed GDPR complaints against AliExpress, TikTok and WeChat. All three tech companies have failed to comply with access requests under Article 15 GDPR. This makes it impossible for European users to exercise their fundamental right to privacy, to find out how their personal data is being processed – and if the companies actually comply with other GDPR provisions, for example regarding data transfers. EU law usually allows users to get a full copy of their data. Complaint against TikTok (EN)Complaint against TikTok (EL)Complaint against AliExpress (EN)Complaint against AliExpress (FR)Complaint against WeChat (EN)Complaint against WeChat (NL)Chinese Apps are even worse than US Providers. Most major tech companies have by now implemented some sort of automation tool that allows them to fulfil GDPR access requests on a mass scale, usually via a “download your information” tool. Theoretically, this would make it extremely easy for them to comply with EU l

How it connects

References

Related across sources

C/09/697386 / HA ZA 26-52 Den Haag District Court: 51 gamblers sue Unibet operator Risepoint over unanswered GDPR The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1… Rb. Den Haag Sep 2, 2026 Right of Access Personal Data Data Portability
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Apr 13, 2021 Marketing IP Address Transparency
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Opinion Jul 28, 2022 Minors Child Consent Legitimate Interest
Opinion 1/2026 EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence EDPB, EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital… Opinion Jan 21, 2026 Artificial Intelligence Entry Into Force Mutual Assistance Between Member States for AI Oversight
2022 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… May 12, 2022 Privacy Shield Processing Agreement International Transfer
€2M Garante fines Lusha Systems Inc. over unauthorized B2B contact database Lusha Systems Inc. (the controller) operated a subscription-based platform that provided professional contact information through a business-to-business (B2B) database. It was a… Italy ·Art. 3, 5, 6 +2 Jul 14, 2026 Personal Data IP Address Legitimate Interest
Related documents