TikTok distributed a tool that collected behavioural data — clicks, purchases, add-to-cart actions — from other websites and apps, linked it to account and device identifiers, and used it for targeted advertising.
Korea's Personal Information Protection Commission found that personal data had been collected, used and transferred overseas without lawful consent.
| Party | Fine |
|---|---|
| TikTok | KRW 10.306 billion |
| Apple affiliate | KRW 252 million |
| Total | KRW 10.558 billion |
Corrective and disclosure orders accompanied the fines. Apple was additionally sanctioned over consent procedures and safeguards relating to Siri transcript collection.
The investigation found that roughly 71,000 companies used the collection tool, gathering behavioural data on approximately 9.45 million active domestic users.
Those numbers are the point. TikTok was penalised, but the 71,000 advertisers are the ones who embedded the tool on their own properties and let the data flow. Pasting in a pixel or SDK is where personal data processing begins.
Even when the media platform supplies the tool, the data passes through your site. So does the first line of responsibility.
If you need an audit of your measurement stack, get in touch.
TikTok was fined KRW 10.306 billion and an Apple affiliate KRW 252 million, totalling KRW 10.558 billion, alongside corrective and disclosure orders.
Collecting and using behavioural data — clicks, purchases, add-to-cart actions on other sites and apps — without lawful consent, and transferring it overseas.
About 71,000 companies used the collection tool, and behavioural data on roughly 9.45 million active domestic users was gathered.
To apply what you just read to your own site, start with a free audit of where things are now.
A strategist replies within 24 hours on business days.
Meta has begun alerting advertisers that the Placements option is being removed from ad sets, along with platform exclusions. Another notch of control disappears into automation.
NBT signed an ad server deal with Mobwith to expand into display advertising. What advertisers should check when an 11M MAU reward network starts selling standard display inventory.
Naver display ads reach reporting launched August 12. Here is what it measures, why logged-in-only counting and 10,000-unit buckets matter, and which campaigns are excluded.