TikTok – €5,000,000 Fine (France, 2022)

€5,000,000Commission Nationale de l'Informatique et des Libertés29 December 2022France
final
ePrivacy
Fine

TikTok was fined EUR 5 million by the French data protection authority for placing cookies on users' devices without proper consent. This is significant because it shows that companies must make it easy for users to reject cookies, not just accept them. Businesses should review their cookie consent practices to avoid similar fines.

What happened

TikTok placed cookies on users' devices without obtaining proper consent and made it harder to reject cookies than to accept them.

Who was affected

Users in France who visited TikTok's website and had cookies placed on their devices without proper consent.

What the authority found

The French authority found that TikTok violated ePrivacy rules by placing cookies without proper consent and making it easier to accept than reject them.

Why this matters

This case highlights the need for clear and easy-to-use cookie consent mechanisms. Companies should ensure users can easily refuse cookies to comply with privacy regulations.

National Law Articles

AI-identified

Article 82 of the French Data Protection Act
Source verified 5 March 2026
articles corrected
national law identified
France enforcementCommission Nationale de l'Informatique et des Libertés actionsAll TikTok actions
Full Legal Summary
Detailed

TikTok's cookie banner made rejecting cookies more difficult than accepting them, and certain advertising cookies were placed even after users rejected them.

Violations (4)

Reject Harder Than Accept
critical

Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Cookies Persist After Rejection
critical

Tracking cookies remain active or are re-placed even after the user explicitly rejects them.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for TikTok in FR

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

unknown (claimant)

2021 · DPA OLGWien

Azienda USL della Romagna

2021 · Garante per la protezione dei dati personali

€50K

Ramona Films, S.L.

2022 · Agencia Española de Protección de Datos

€8K

CNIL

2019 · Court of Justice of the European Union

Minister for Legal Protection

2022 · DPA RbOverijssel

Details

Fine Date

29 December 2022

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€5,000,000

GDPRhub ID

gdprhub-5569

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 100%

Cite as: Cookie Fines. TikTok - France (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: