DPA case 9788429 – Order (Italy, 2022)
TikTok was found to have planned to use cookies for targeted ads without getting user consent first. This is significant because it reminds companies that they need to ask users for permission before using their data.
What happened
TikTok intended to use cookies for personalized advertising without obtaining prior user consent.
Who was affected
TikTok users who would have been targeted by the ads were affected.
What the authority found
The Italian DPA ruled that TikTok lacked a valid legal basis for processing personal data, violating GDPR requirements.
Why this matters
This case highlights the importance of obtaining user consent for data processing. It serves as a warning to other companies about the legal requirements for using cookies.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
TikTok planned to use cookies for personalized advertising without obtaining prior user consent, relying instead on legitimate interest.
Outcome
Order
A binding order requiring the controller to take specific action.
Violations (1)
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 9788429 in IT
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 9788429 - Italy (2022). Retrieved from cookiefines.eu
Last updated: