抖音国际版因其隐私政策的修订意向遭意大利DPA的警告

TikTok Being Warned by Italian DPA Over Its Intended Privacy Policy Revision
意大利数据保护局（“DPA”）在2022年7月7月向TikTok发出正式警告，原因是TikTok宣布的原定于2022年7月13日生效的隐私政策修改违反法律规定。
The Italian Data Protection Authority (“DPA”) issued a formal warning on July 7th, 2022 to TikTok, who announced its revision on privacy policy to be effective since July 13th, 2022 regarding targeted advertising.
2022年6月，TikTok通知其用户，将开始使用"合法利益"而不是用户的 "同意"作为向18岁以上的用户推送行为定向广告的合法性依据。在此公告发布后不久，意大利DPA要求该视频平台提供更多信息以进行调查，并最后认定，TikTok以“合法利益”作为推送行为定向广告的意图违反了《电子隐私指令》和《意大利数据保护法》。前述两部法律规定只有在获取用户同意的情况下才能处理非技术性cookies，以及“合法利益”不能作为对用户在社交媒体上的行为进行画像分析的合法性依据。
Back in June 2022, TikTok informed its users that it would start showing users above age 18 personalized advertisements based on the users’ behavior on the APP, by relying on “legitimate interests” but not “consent” from users anymore. Soon after this announcement, the Italian DPA requested the video platform for more information and after a preliminary investigation, the Italian DPA determined that such future change of legal basis for targeted advertising would be in violation of the E-Privacy Directive and the Italian Data Protection Code, which provide that non-technical cookies may only be processed if users gave their consent and that profiling based on behavioral pattern on social media cannot rely on legitimate interest as legal basis.
同时，由于意大利DPA曾发现TikTok的年龄验证措施并不充分，DPA对TikTok为未成年用户提供的保护表示担忧，并指出存在儿童可能接触到不当广告和不适宜内容的风险。
The Italian DPA also expresses concern about the protection of minor users of the risk related to children’s exposure to inappropriate ads and unsuitable content, as the Italian DPA has previously found that TikTok’s age verification measures were inadequate.
面对正式警告，TikTok已经中止了计划的隐私政策修改，并继续采取获得同意的方式向十八岁以上的用户投放行为定向广告。与此同时，意大利DPA表示愿意与TikTok保持沟通，以寻求TikTok经济利益和个人数据权利保护之间的平衡。
Following the formal warning, TikTok has suspended its original plan for change of legal basis and continues to obtain consent for targeted advertisements to users above eighteen years old. Nevertheless, the Italian DPA expressed that it is open to a dialogue aimed at balancing the data protection rights of individuals and TikTok’s economic interests.