Criteo – Court Ruling (Netherlands, 2023)

Court Ruling
DPA RbAmsterdam18 October 2023Netherlands
final
Court Ruling

Criteo placed tracking cookies on users' devices without asking for permission and kept collecting data even after users said no. This practice goes against privacy rules that require companies to get consent before using cookies. This ruling shows that companies must respect user choices about tracking.

What happened

Criteo placed tracking cookies without obtaining prior user consent and continued to collect cookies even after users had refused consent.

Who was affected

Website visitors who encountered Criteo's tracking cookies on various sites.

What the authority found

The court ruled that Criteo lacked a valid legal basis for processing personal data by not obtaining user consent, violating GDPR requirements.

Why this matters

This ruling highlights that companies must ensure they have proper consent before using tracking technologies. It serves as a reminder for website operators to review their cookie consent practices.

GDPR Articles Cited
Automatically processed
Art. 6(1)(a) GDPR
Art. 79(GDPR)
View original scraped data
Art. 6(1)(a) GDPR
Art. 79(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 11.7a of the Telecommunications Act
Decision AuthorityRb. Amsterdam

Source checks

Linked-source text retrieved.

Review needed — 20 March 2026.

Processing notes: articles corrected, national law identified, authority corrected, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Criteo placed tracking cookies without obtaining prior user consent and continued to collect cookies even after users had refused consent.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Violations (2)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Cookies Persist After Rejection
critical

Tracking cookies remain active or are re-placed even after the user explicitly rejects them.

Art. 6(1) GDPR

Related Cases (0)

No other cases found for Criteo in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

18 October 2023

Authority

DPA RbAmsterdam

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Criteo - Netherlands (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: