Noyb files GDPR complaints against TikTok, AliExpress, and WeChat over data access
Noyb criticised the three apps for not offering accessible or automated tools that would allow users to retrieve their data directly, noting that the platforms fell short of the transparency required by the regulation.
The privacy rights organisation Noyb has filed three complaints under the General Data Protection Regulation (GDPR) against Chinese-owned apps TikTok, AliExpress, and WeChat. The complaints, submitted on 17 July 2025, allege that the companies failed to comply with the GDPR’s provisions on the right of access to personal data. According to Noyb, the three platforms either did not respond to user data access requests or provided incomplete or unusable information.
Under the GDPR, individuals in the EU have the right to request a copy of all personal data held about them by a service provider. In this case, Noyb found that TikTok’s response was incomplete, AliExpress provided a file that could not be opened, and WeChat failed to reply altogether. The complaints were lodged with the data protection authorities in Greece, Belgium, and the Netherlands.
Noyb criticised the three apps for not offering accessible or automated tools that would allow users to retrieve their data directly, noting that the platforms fell short of the transparency required by the regulation. The organisation stated in its press release that Chinese apps were performing worse than their US counterparts in terms of privacy compliance.
This is not the first time Noyb has used data access provisions to challenge tech companies. A similar action in 2019 targeted eight European and US firms, leading to several investigations and enforcement measures. While GDPR violations can result in fines of up to 4% of a company’s global revenue, the actual penalties vary widely. For example, a complaint previously filed by Noyb against Netflix led to a €4.75 million fine in 2024.
WeChat’s parent company, Tencent, responded by stating that it complies with local laws and privacy regulations in its operating markets and remains committed to data protection. TikTok and AliExpress did not comment on the complaints by the time of publication. The outcome of these latest complaints could further shape how international tech companies approach user data rights under European law.
