Meta Ads · Status at source date: Newsletter archive
Criteo €40M GDPR fine confirmed by French Conseil d'État
David Pombar Lourido has flagged that the €40 million GDPR fine against Criteo has been confirmed by the French Conseil d'État: the highest administrative court in France: making it final and no longer subject to appeal. The fine reflects data collected and used without a proper legal basis across thousands of marketing stacks where Criteo is deeply embedded.

What changed
Pombar Lourido notes the broader implication: most teams do not fully control what happens after consent is collected, with signals sent before they should be or to vendors they were not aware of.
Why it matters for advertisers
For you, this means auditing your data flows at the network level: not just your CMP configuration: to verify which vendors are receiving signals, when, and whether consent state is being correctly respected before transmission.
Perspective from the original PMC newsletter.Sources & contributor credit
- Newsletter coverage · Paid Media Collective newsletter
Original newsletter text, contributor labels and media for this update.
- Source referenced in newsletterLinkedIn
Linked from the original newsletter. The source publication date has not been independently confirmed.
Original creator unverified
The names below are source credits. The original creator and first-reporting priority have not yet been independently verified.
Attribution evidence and limitations
Full attribution review pending.
A source link alone does not establish original authorship.
Original image and video creators have not yet been verified.
- Published on this site
This update reflects the dated source reporting. Availability may have changed. Further coverage of this same development will be added to this page.
Original newsletter text and archive evidence
Criteo €40M GDPR fine confirmed by French Conseil d'État
David Pombar Lourido has flagged that the €40 million GDPR fine against Criteo has been confirmed by the French Conseil d'État: the highest administrative court in France: making it final and no longer subject to appeal. The fine reflects data collected and used without a proper legal basis across thousands of marketing stacks where Criteo is deeply embedded. Pombar Lourido notes the broader implication: most teams do not fully control what happens after consent is collected, with signals sent before they should be or to vendors they were not aware of.
For you, this means auditing your data flows at the network level: not just your CMP configuration: to verify which vendors are receiving signals, when, and whether consent state is being correctly respected before transmission.
Source captured . No explicit first-contributor label was provided for this update.




