France: CNIL investigation into CRITEO compliance with GDPR obligation to obtain user consent for collecting and processing data
Progress
Current status
in force
15 Jun 2023 in force
27 Dec 2019 under deliberation
Scope
Implementers
France
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
online advertising provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Issued ruling in CNIL investigation into CRITEO compliance with GDPR obligation to obtain user consent for collecting and processing data
On 15 June 2023, the French Data Protection Authority (CNIL) issued its ruling in the investigation into CRITEO, a company specialising in online advertising, imposing a EUR 40 million fine for failing to ensure that the people whose data it proces…
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Announced CNIL investigation into CRITEO compliance with GDPR obligation to obtain user consent for collecting and processing data
On 27 December 2019, the French Data Protection Authority (CNIL) instructed the Secretary-General to carry out a verification mission of the processing operations implemented by the company CRITEO. The CNIL started an investigation after complaints …
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority