VOODOO (the controller) – €3,000,000 Fine (France, 2022)

€3,000,000Commission Nationale de l'Informatique et des Libertés29 December 2022France
final
ePrivacy
Fine

VOODOO was fined €3 million by the French data protection authority for using cookies without proper consent. This case shows how important it is to have clear consent mechanisms for tracking technologies.

What happened

VOODOO placed cookies on user devices before obtaining proper consent, violating privacy rules.

Who was affected

Users of VOODOO's mobile applications who were tracked without clear consent.

What the authority found

The French DPA fined VOODOO €3 million for using cookies without valid consent, violating ePrivacy rules.

Why this matters

This ruling emphasizes the need for companies to ensure clear and explicit consent for cookies and tracking technologies. It serves as a reminder that misleading consent banners can lead to significant fines.

GDPR Articles Cited

AI-verified

Art. 5(3) ePrivacy Directive GDPR
Art. 82 Loi Informatique et Libertés GDPR
View original scraped data
Art. 82 Loi Informatique et Libertés
Art. 5(3) ePrivacy Directive

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 82 Loi Informatiques et Libertés
Source verified 5 March 2026
articles corrected
national law identified
France enforcementCommission Nationale de l'Informatique et des Libertés actionsAll VOODOO (the controller) actions
Full Legal Summary
Detailed

VOODOO's app tracking consent mechanism lacked a clear reject option and used misleading messaging about data protection.

Violations (4)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Cookies Persist After Rejection
critical

Tracking cookies remain active or are re-placed even after the user explicitly rejects them.

Art. 6(1) GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for VOODOO (the controller) in FR

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

Data Subject versus Telecommunications Company

2025 · DPA OLGKoblenz

Legal Person

2023 · Úřad pro ochranu osobních údajů

€4K

Ramona Films, S.L.

2022 · Agencia Española de Protección de Datos

€8K

CNIL

2019 · Court of Justice of the European Union

Minister for Legal Protection

2022 · DPA RbOverijssel

Details

Fine Date

29 December 2022

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€3,000,000

GDPRhub ID

gdprhub-5636

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 85%

Cite as: Cookie Fines. VOODOO (the controller) - France (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: