France: Closed CNIL investigation into Microsoft based on compliance with injunction order

On 11 May 2023, the French Data Protection Authority's (CNIL) restricted committee closed the investigation into Microsoft based on its compliance with the injunction order issued on 19 December 2022. Microsoft was fined EUR 60 million and instructed to enable users of "bing.com" in France to provide their consent for the use of tracers used in combating advertising fraud within 3 months. The injunction order specified that in case of non-compliance, Microsoft would have been required to pay a fine of EUR 60'000 per day. Microsoft responded and implemented technical changes to deactivate tracking related to combatting advertising fraud when specific consent from French users was not obtained. The CNIL's restricted committee closed the investigation following an assessment of the technical measures implemented.