YAHOO EMEA LIMITED

CNIL (France) case SAN-2023-024, decided 2023-12-29. EUR 10,000,000.

What the regulator decided

Around twenty advertising cookies were deposited on the user's terminal on yahoo.com despite no expressed consent, and Yahoo! Mail users who withdrew consent were told they would lose access to the service - both breaches of Article 82 of the French Data Protection Act.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048967251

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20241208085753/https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000048967251

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Cite the Legifrance deliberation rather than the cnil.fr press summary - the EN press release at cnil.fr/en/cookies-cnil-fined-yahoo-eu10-million 301-redirects to a generic landing page (verified dead 2026-05-22), whereas Legifrance is the French government's official legal gazette and carries the full deliberation text under CNILTEXT000048967251. CNIL is the lead authority on cookie enforcement under ePrivacy; quote this case whenever a scan finds advertising tags firing before consent.

Verification trail

Verified by: donal
Verified at: 2026-05-22
Review due: 2026-08-20

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-cnil-san-2023-024,
  author       = {{ConsentMark}},
  year         = {2023},
  title        = {CNIL (France) SAN-2023-024 - YAHOO EMEA LIMITED},
  howpublished = {\url{https://www.consentmark.com/precedent/cnil-san-2023-024}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2023, December 29). CNIL (France) SAN-2023-024 - YAHOO EMEA LIMITED. Methodology v1.3. https://www.consentmark.com/precedent/cnil-san-2023-024

Markdown

[CNIL (France) SAN-2023-024 - YAHOO EMEA LIMITED - ConsentMark](https://www.consentmark.com/precedent/cnil-san-2023-024)

Plain text

CNIL (France) SAN-2023-024 - YAHOO EMEA LIMITED - ConsentMark, 2023-12-29, methodology v1.3, https://www.consentmark.com/precedent/cnil-san-2023-024