21
Mar
On March 7, 2024, the European Court of Justice (CJEU) issued a landmark ruling on digital advertising and the concepts of personal data and joint controllership under the General Data Protection Regulation (GDPR).
The CJEU held that i) character strings used to express users’ preferences collected via the Transparency and Consent Framework (TCF) of Interactive Advertising Bureau Europe (IAB) constitute personal data under the GDPR and ii) IAB acts as a joint controller with TCF participants for the processing of users’ preferences....