2018–2026
GDPR complaint against Criteo, €40 million CNIL fine and subsequent dismissal of appeal
Privacy International filed a complaint in 2018 targeting several data brokers and advertising technology companies, including Criteo. Following a lengthy investigation, CNIL fined Criteo €40 million in 2023 for several GDPR breaches, particularly concerning evidence of consent, transparency, access to data, withdrawal of consent and joint responsibility. The Council of State subsequently dismissed Criteo's appeal in March 2026.
- State of the evidence
- Documented
Sources · 4
- [1]Privacy InternationalOur complaints against Acxiom, Criteo, Equifax, Experian, Oracle, Quantcast and TapadNGOMedium reliability
- [2]CNILPublicité personnalisée : CRITEO sanctionné d’une amende de 40 millions d’eurosRegulatory authorityPrimary source
- [3]
- [4]
Last verified: 7 September 2026
