Precedent corpus / CJEU (Court of Justice of the European Union)
IAB Europe
CJEU (Court of Justice of the European Union) case C-604/22, decided 2024-03-07. No monetary penalty.
Regulator guidance (positive exemplar)
What the regulator decided
A string composed of a combination of letters and characters, such as the TC String, constitutes personal data where those data may by reasonable means be associated with an identifier such as the IP address of the user's device. A sectoral organisation is a joint controller where it exerts influence over the processing for its own purposes and thereby determines, jointly with its members, the purposes and means of that processing.
Primary source
Regulator-owned URL. Quote this in legal briefs and academic citations.
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A62022CJ0604Archived snapshot
Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.
https://web.archive.org/web/20260624153912/https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A62022CJ0604ConsentMark interpretation
Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.
[Type: guidance] Court of Justice, not a DPA. Case file also at curia.europa.eu/juris/liste.jsf?num=C-604/22; EUR-Lex is cited as the primary source because curia serves the judgment only to a browser. A preliminary ruling is final - there is no appeal from the Court. The Court added that joint controllership does not extend automatically to the subsequent processing carried out by website or application providers.
Verification trail
- Verified by
- donal
- Verified at
- 2026-08-27
- Review due
- 2027-02-27
Cite this case
Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.
@misc{consentmark-precedent-cjeu-c-604-22,
author = {{ConsentMark}},
year = {2024},
title = {CJEU (Court of Justice of the European Union) C-604/22 - IAB Europe},
howpublished = {\url{https://www.consentmark.com/precedent/cjeu-c-604-22}},
note = {ConsentMark methodology v7.6}
}ConsentMark. (2024, March 7). CJEU (Court of Justice of the European Union) C-604/22 - IAB Europe. Methodology v7.6. https://www.consentmark.com/precedent/cjeu-c-604-22[CJEU (Court of Justice of the European Union) C-604/22 - IAB Europe - ConsentMark](https://www.consentmark.com/precedent/cjeu-c-604-22)CJEU (Court of Justice of the European Union) C-604/22 - IAB Europe - ConsentMark, 2024-03-07, methodology v7.6, https://www.consentmark.com/precedent/cjeu-c-604-22