MICROSOFT IRELAND OPERATIONS LIMITED

CNIL (France) case SAN-2022-023, decided 2022-12-19. EUR 60,000,000.

What the regulator decided

Advertising cookies were deposited on users' terminals when they arrived on bing.com without their prior consent, and the consent interface did not offer a "refuse" mechanism with the same simplicity as the "accept" mechanism, breaching the freely-given and equivalent- refusal limbs of Article 82 of the French Data Protection Act.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046768989

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20250209183135/https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046768989

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Bing (Microsoft search engine) precedent. Cite alongside SAN-2021-024 (Facebook), SAN-2021-023 (Google) and SAN-2022-027 (TikTok) for the pan-platform asymmetric-refuse pattern; the EUR 60M scale signals that the CNIL does not treat the asymmetry as a paperwork failing.

Verification trail

Verified by: donal
Verified at: 2026-05-27
Review due: 2026-11-27

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-cnil-san-2022-023,
  author       = {{ConsentMark}},
  year         = {2022},
  title        = {CNIL (France) SAN-2022-023 - MICROSOFT IRELAND OPERATIONS LIMITED},
  howpublished = {\url{https://www.consentmark.com/precedent/cnil-san-2022-023}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2022, December 19). CNIL (France) SAN-2022-023 - MICROSOFT IRELAND OPERATIONS LIMITED. Methodology v1.3. https://www.consentmark.com/precedent/cnil-san-2022-023

Markdown

[CNIL (France) SAN-2022-023 - MICROSOFT IRELAND OPERATIONS LIMITED - ConsentMark](https://www.consentmark.com/precedent/cnil-san-2022-023)

Plain text

CNIL (France) SAN-2022-023 - MICROSOFT IRELAND OPERATIONS LIMITED - ConsentMark, 2022-12-19, methodology v1.3, https://www.consentmark.com/precedent/cnil-san-2022-023