Privacy legislation only works because companies have to worry about whistleblowers leaking violations to the media, which would cause them to be fined. China can disappear any whistleblowers and has full control over their media. If CCP compromising TikTok is proven despite this, then it's over for TikTok anyways and fines are irrelevant.