Precedent corpus / EDPB (European Data Protection Board)

TikTok Technology Limited

EDPB (European Data Protection Board) case BD-02-2023, decided 2nd August 2023. No monetary penalty.

ContextAppeal status not checked

We have not checked whether this decision was appealed. This is not a statement that no appeal exists.

No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.

What the regulator decided

Two TikTok pop-up notifications shown to users aged 13-17 failed to present privacy options in an objective, neutral way and so breached the fairness principle in Article 5(1)(a) GDPR; the EDPB directed the Irish DPC to include findings on these dark-pattern design practices in its final decision.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.edpb.europa.eu/documents/edpb-binding-decisions/binding-decision-22023-on-the-dispute-submitted-by-the-irish-sa_en

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20251210212756/https://www.edpb.europa.eu/our-work-tools/our-documents/binding-decision-board-art-65/binding-decision-22023-dispute-submitted_en

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Binding decisions do not themselves impose fines; the accompanying DPC final decision (1 September 2023) imposed the EUR 345 million penalty. fine_eur is zero on this entry by convention - the citable significance is the EDPB framing of dark-pattern unfairness, not the monetary outcome.

Verification trail

Checked against the primary source on 27th August 2026. Next review 27th February 2027.

Cite this case

BibTeX

@misc{consentmark-precedent-edpb-bd-02-2023,
  author       = {{ConsentMark}},
  year         = {2023},
  title        = {EDPB (European Data Protection Board) BD-02-2023 - TikTok Technology Limited},
  howpublished = {\url{https://www.consentmark.com/precedent/edpb-bd-02-2023}},
  note         = {ConsentMark methodology v7.8.1}
}

APA

ConsentMark. (2023, August 2). EDPB (European Data Protection Board) BD-02-2023 - TikTok Technology Limited. Methodology v7.8.1. https://www.consentmark.com/precedent/edpb-bd-02-2023

Markdown

[EDPB (European Data Protection Board) BD-02-2023 - TikTok Technology Limited - ConsentMark](https://www.consentmark.com/precedent/edpb-bd-02-2023)

Plain text

EDPB (European Data Protection Board) BD-02-2023 - TikTok Technology Limited - ConsentMark, 2023-08-02, methodology v7.8.1, https://www.consentmark.com/precedent/edpb-bd-02-2023