Cookie gate continues….
Jack Rogers
For a bit of background, between 2020 and 2022, the CNIL conducted several investigations on the tiktok.com website in an unlogged session, not on the mobile application.
The CNIL found that TikTok UK and Tiktok Ireland failed to comply with their obligations which are set out in Article 82 of the French Data Protection Act.
What does French law say?
Under Article 82 of the DPA, any action through which an electronic communication service accesses or enters information in a user’s terminal equipment (such as the storage of cookies) requires the user’s consent. All users must be “clearly and fully informed” of the purpose of any action AND the means to oppose it.
Article 4 of the GDPR (European Union’s Data Protection Regulation) highlights consent must be specific and manifested as a positive act. Recital 42 of the GDPR states consent is not free if the user cannot “refuse or withdraw consent without suffering prejudice”.
What was breached?
TikTok UK and TikTok Ireland did offer a button allowing immediate acceptance of the cookies. However, the CNIL said that they did not put in place an equivalent solution (button) to allow Internet users to refuse consent just as easily, and several clicks were required to refuse all cookies compared to one just to accept them.
It was considered that the complexities surrounding the refusal mechanism actually discouraged users from refusing cookies and encouraged them to prefer the ease of the “accept all” button.
Thus, TikTok UK and Ireland’s processes infringed on the freedom of consent of Internet users and violated Article 82 of the French DPA.
It is worth noting that CNIL was territorially and materially competent as the use of cookies was carried out within the framework of the activities of TikTok SAS, which is the French establishment of TikTok. In particular, the CNIL can assert their jurisdiction and is “materially competent to verify and sanction operations related to cookies deposited by the companies on the terminals of Internet users located in France”.
To summarise:
Refusing cookies should be as easy as accepting them.
Pre-ticked boxes are not allowed!
Recommended for you
10 Facts about Running Promotions in Italy
The running of ‘Promotions’ are taking off across the world not just…
2023: A Year of Innovation and Growth at PromoVeritas
A quick lookback at 2023 – a year in which PromoVeritas cemented…
Contact us to discuss your next promotion
Other ways we can
help you succeed
Delivery
Trust us to take care of every detail so your prize winners, wherever they are in the world, have a memorable brand experience and will tell their friends and family about forever.
Digital
Trust us to design and build engaging and memorable digital experiences for your audience anywhere in the world, we can roll out in multiple languages and countries, securely capture and manage first party data with data kill dates and right to forget support built-in.
Insights
Trust us to safely manage consumer PII and prepare actionable insights & learnings from your promotion to drive your business forward.
Legal Advice
Trust our lawyer and compliance team to draft lawful Terms & Conditions, translated when necessary and to brief you on the rules & regulations governing participating markets.
Promotional Expertise
Trust to advise you on the right promotional mechanic to meet your objectives – Win £ $ €, Enter a Game of Skill / Competition, Claim a Free Gift with Purchase – we know which lever you should pull and what can legally be run in-markets around the world.
