- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
DPA case 9788429 – Order (Italy, 2022)
TikTok was found to have planned to use cookies for targeted ads without getting user consent first. This is significant because it reminds companies that they need to ask users for permission before using their data.
What happened
TikTok intended to use cookies for personalized advertising without obtaining prior user consent.
Who was affected
TikTok users who would have been targeted by the ads were affected.
What the authority found
The Italian DPA ruled that TikTok lacked a valid legal basis for processing personal data, violating GDPR requirements.
Why this matters
This case highlights the importance of obtaining user consent for data processing. It serves as a warning to other companies about the legal requirements for using cookies.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
TikTok planned to use cookies for personalized advertising without obtaining prior user consent, relying instead on legitimate interest.
Outcome
Order
A binding order requiring the controller to take specific action.
Violations (1)
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 9788429 in IT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
DPA case Takeaway B.V. - z2022-04011
2024 · Autoriteit Persoonsgegevens
DPA case 9782890
2022 · Garante per la protezione dei dati personali
DPA case 11/2022
2022 · Autorité de Protection des Données
DPA case ZSPR.440.331.2019.PR.PAM
2021 · Urząd Ochrony Danych Osobowych
Posti Oy
2022 · Finnish Transport and Communications Agency Traficom
Details
About this data
Cite as: Cookie Fines. DPA case 9788429 - Italy (2022). Retrieved from cookiefines.eu
Last updated: