Precedent corpus / CNIL (France)
Anonymised French website operator
CNIL (France) case MED-GOOGLE-ANALYTICS-ANONYMISED, decided . No monetary penalty.
We have not checked whether this decision was appealed. This is not a statement that no appeal exists.
The deciding authority did not name this party. The designation above is the authority's own. This corpus does not restore a name a regulator declined to publish.
No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.
What the regulator decided
On 10 February 2022 the CNIL put a French website operator on formal notice, holding that the unique identifiers, IP addresses, browser data and metadata collected through the Google Analytics functionality and transferred to Google LLC in the United States could be justified under no Chapter V instrument, and so compromised the level of protection guaranteed by Article 44 GDPR. The operator was given one month to comply, if necessary by ceasing to use the tool.
Primary source
Regulator-owned URL. Quote this in legal briefs and academic citations.
https://www.cnil.fr/sites/default/files/atoms/files/med_google_analytics_anonymisee.pdfArchived snapshot
Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.
https://web.archive.org/web/20230308201444/https://www.cnil.fr/sites/default/files/atoms/files/med_google_analytics_anonymisee.pdfConsentMark interpretation
Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.
Published in anonymised form: the CNIL redacted the decision number, date and respondent because the tool is widely used and the point was general, so the case_ref here is a constructed stable id, not a CNIL number. Decided on the post-Schrems II position; the EU-US Data Privacy Framework adequacy decision of 10 July 2023 changed the transfer analysis prospectively for certified US importers. Both 2022 CNIL pages now 301 elsewhere and the PDF 404s, so archive_url is load-bearing.
Verification trail
Checked against the primary source on 18th August 2026. Next review 18th February 2027.
Cite this case
@misc{consentmark-precedent-cnil-med-google-analytics-anonymised,
author = {{ConsentMark}},
year = {2022},
title = {CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator},
howpublished = {\url{https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised}},
note = {ConsentMark methodology v7.8.1}
}ConsentMark. (2022, February 10). CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator. Methodology v7.8.1. https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised[CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator - ConsentMark](https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised)CNIL (France) MED-GOOGLE-ANALYTICS-ANONYMISED - Anonymised French website operator - ConsentMark, 2022-02-10, methodology v7.8.1, https://www.consentmark.com/precedent/cnil-med-google-analytics-anonymised