CRITEO SA

CNIL (France) case SAN-2023-009, decided 2023-06-15. EUR 40,000,000.

What the regulator decided

Criteo processed user navigation data for behavioural-advertising retargeting without verifying that the consent collected by its partner publishers met the freely-given, specific, informed and unambiguous standard, breaching Article 6(1)(a) and 7 GDPR; provided insufficient information to data subjects under Articles 12 and 13; and failed to give effect to access and erasure requests under Articles 15 and 17 across the data-broker network.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20241128150640/https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047707063

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

The flagship adtech-retargeting precedent under GDPR. Cite when a scanner finds third-party retargeting or behavioural-advertising tags firing without an evidenced upstream consent signal - the principle here is that the downstream processor cannot rely on the publisher's consent banner without verifying it carries through.

Verification trail

Verified by: donal
Verified at: 2026-05-27
Review due: 2026-11-27

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-cnil-san-2023-009,
  author       = {{ConsentMark}},
  year         = {2023},
  title        = {CNIL (France) SAN-2023-009 - CRITEO SA},
  howpublished = {\url{https://www.consentmark.com/precedent/cnil-san-2023-009}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2023, June 15). CNIL (France) SAN-2023-009 - CRITEO SA. Methodology v1.3. https://www.consentmark.com/precedent/cnil-san-2023-009

Markdown

[CNIL (France) SAN-2023-009 - CRITEO SA - ConsentMark](https://www.consentmark.com/precedent/cnil-san-2023-009)

Plain text

CNIL (France) SAN-2023-009 - CRITEO SA - ConsentMark, 2023-06-15, methodology v1.3, https://www.consentmark.com/precedent/cnil-san-2023-009