On January 12, 2023, the French Data Protection Authority (the “CNIL”) announced a €5,000,000 fine for the social network TikTok for violations of applicable cookie rules. The fine was imposed at the end of 2022.
The CNIL carried out several investigations of TikTok’s website (but not its mobile app) between May 2020 and June 2022. Following these investigations, the CNIL concluded that TikTok Information Technologies UK Limited and TikTok Technology Limited had failed to comply with the obligations set out in Article 82 of the French Data Protection Act.
The CNIL’s Decision and Sanctions
According to the CNIL, the amount of the fine is justified by the number of data subjects in France affected, including minors, and the CNIL’s numerous prior communications about offering users an easy way to reject cookies.
The CNIL’s Jurisdiction