Irish Data Protection Commission Investigates Shein Over EU Data Transfers to China
The Irish Data Protection Commission (DPC) has launched an investigation into Shein, a fast fashion retailer, regarding its compliance with the General Data Protection Regulation (GDPR) in transferring customer data from the EU to China. The inquiry aims to determine if Shein Ireland has adhered to GDPR requirements, which mandate that personal data transferred outside the EU must receive protections equivalent to those within the EU. DPC Deputy Commissioner Graham Doyle emphasized the strategic importance of this investigation, noting that recent regulatory actions and complaints have highlighted concerns about data transfers to China. Shein has stated its commitment to data protection and compliance with GDPR, asserting that customer data security is a top priority.