On June 22, 2023, the French data protection authority (CNIL) released Deliberation SAN-2023-009 of June 15, 2023, in which it fined Criteo €40 million for failing to verify that personal data was being processed with consent in violation of the General Data Protection Regulation (GDPR) following a complaint.