Linkedin – Court Ruling (Netherlands, 2024)

Court Ruling
DPA RbAmsterdam7 June 2024Netherlands
final
ePrivacy
Court Ruling

A Dutch court ruled that LinkedIn placed tracking cookies on users' devices without their consent. This is significant because it shows that companies must respect users' choices about their data. Website operators should ensure they obtain clear consent before using tracking technologies.

What happened

LinkedIn placed tracking cookies on users' devices even after they refused consent.

Who was affected

Users who visited websites that used LinkedIn's tracking cookies were affected.

What the authority found

The court held that LinkedIn and its partners lacked a valid legal basis for collecting personal data through cookies, violating GDPR's consent requirements.

Why this matters

This case sets a precedent that companies must respect users' cookie preferences, emphasizing the need for clear consent mechanisms in digital advertising.

GDPR Articles Cited
Automatically processed
Art. 6(GDPR)
Art. 26(3) GDPR
View original scraped data
Art. 6(GDPR)
Art. 26(3) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 11.7a of the Dutch Telecommunications act
Decision AuthorityRb. Amsterdam

Source checks

Secondary-source text retrieved.

Review needed — 11 April 2026.

Processing notes: articles corrected, national law identified, entity split needed, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The data subject visited several popular websites and refused all cookies. However, tracking cookies were still placed on the data subject’s device. The controllers are Linkedin Ireland, Linkedin Netherlands, Microsoft Corporation (US), Microsoft Ireland Operations, Microsoft (NL) and Xandr (US). LinkedIn offers an advertising service and allows for companies to place tracking cookies on the browsers of a user after they view or click their ads. Microsoft has an advertising service that sells ad space on various websites. The service also allows advertisers to show their ads on the ad space of 'third-party' website operators and can place tracking cookies on the devices of website visitors. Xandr is an online platform that buys and sells digital ads. To use the services of Xandr, website users need to install a Java-script that places tracking cookies on the devices of website visitors. All of them are part of the Microsoft Group. The data subject hired a third party specialist to make an independent analysis of the controllers’ collection of personal data via the placed cookies. The analysis confirmed that out of the 30 websites the data subject visited, 27 websites placed and/or read cookies without the data subject’s consent. 24 websites did this even after explicit refusal to consent. Thus, the controllers were collecting personal data of the data subject’s browsing habits without their consent. The data subject filed an urgency procedure (“kort geding”) at the Amsterdam District Court (“Rechtbank Amsterdam”), asking the court to forbid the controllers to place tracking cookies without the data subject’s consent. Jurisdiction of the court [https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32012R1215 Brussels I bis Regulation] regulates which courts of the EU Member States have jurisdiction in cases with links to more than one Member State in the EU. [https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32012R1215 Article 7(2) Brussels I bi

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Violations (3)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Cookies Persist After Rejection
critical

Tracking cookies remain active or are re-placed even after the user explicitly rejects them.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Cases (0)

No other cases found for Linkedin in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

7 June 2024

Authority

DPA RbAmsterdam

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified
Cookie relevance: 100%

Cite as: Cookie Fines. Linkedin - Netherlands (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: