Advertising Company CRITEO fined €40 Mio

Data Subject Rights The French Data Protection Authority (CNIL) fined Criteo, a major online advertisement and tracking company in Europe, €40 million for violating the GDPR. This decision is based on complaints filed by noyb and Privacy International in December 2018. The CNIL found that the company failed to comply with data subject rights under the GDPR and could not prove that they obtained valid consent. Original Press Release by CNIL (EN)Original complaint filed in December 2018 by noyb and Privacy InternationalLetter by the CNIL to noyb (FR)Criteo – prominent ad-tech player. The French company Criteo provides “behavioral retargeting” services on thousands of websites. To do so, the company places tracking cookies on websites in order to analyze browsing habits and determines which products and services a user is likely to buy. The company has data on about 370 million people in Europe.Complaint led to further investigation. In December 2018, more than 4.5 years ago, noyb and Pri