TikTok — Enforcement
Executive Summary
France's data protection authority (CNIL) fined TikTok €5 million for violating French cookie consent requirements. The CNIL found that TikTok did not allow users to refuse cookies as easily as accepting them and failed to adequately inform users about the purposes of different cookies. The fine was imposed under Article 82 of the French Data Protection Act following an investigation initiated in 2021.
What Happened
On January 12, 2023, France's data protection authority (CNIL) announced a €5 million fine against TikTok for violating French cookie consent requirements under Article 82 of the French Data Protection Act. The investigation, which began in May 2020, found that TikTok's website made it more difficult for users to refuse cookies than to accept them, requiring multiple clicks to refuse but only one click to accept. The CNIL also found that TikTok failed to adequately inform users about the purposes of different cookies and that certain advertising cookies were placed even when users did not consent.
Who Is Affected
The enforcement action specifically relates to users visiting TikTok's website (tiktok.com) in France, not its mobile app. Users who visited the site between the investigation period starting in May 2020 and February 2022, when TikTok implemented a 'Refuse all' button, were subject to the problematic cookie consent flow. French internet users during this period may have had advertising cookies placed on their devices without proper consent or adequate information about their purposes.
Why It Matters
This case demonstrates that data protection authorities are actively enforcing rules against manipulative design patterns that make refusing tracking more difficult than accepting it. The enforcement follows a 2022 French court decision clarifying that operations involving trackers on devices located in French territory fall within the CNIL's jurisdiction. The action reinforces that consent mechanisms must offer equivalent ease for both accepting and refusing cookies, setting a clear standard for interface design that other platforms must follow to avoid similar penalties.
What You Should Do
If you use TikTok's website, review your cookie settings by accessing the consent management options typically found in the site's privacy or cookie settings. TikTok has reportedly added a 'Refuse all' button as of February 2022, which you can use to decline non-essential cookies with a single click. Consider clearing cookies from your browser that were placed during previous visits when the problematic consent mechanism was in use, and regularly review and update your cookie preferences on websites you visit frequently.
AI-Assisted
Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.
Sources