Description

Issued fine against Microsoft for breach of Data Protection Act through illegal use of cookies

On 19 December 2022, the French Data Protection Authority (CNIL) imposed a penalty of EUR 60 million on Microsoft for violating data protection rules regarding the use of cookies. CNIL's investigation began in September 2020 in response to a complai…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
search service provider
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2020-09-08
under deliberation

On 8 September 2022, the French Data Protection Authority (CNIL) began an investigation into Micros…

2022-12-19
in force

On 19 December 2022, the French Data Protection Authority (CNIL) imposed a penalty of EUR 60 millio…

2023-05-11
concluded

On 11 May 2023, the French Data Protection Authority's (CNIL) restricted committee closed the inves…