Court of Justice judgment · Case C-604/22
IAB Europe v Gegevensbeschermingsautoriteit
- Case
- C-604/22
- Court
- Court of Justice
- Date of judgment
- 7 March 2024
- ECLI
- ECLI:EU:C:2024:214
- Instrument
- Regulation (EU) 2016/679 (GDPR)
- Provisions
- Article 4(1), Article 4(7), Article 26(1)
Holding (summary, not the official text)
A consent string recording a user's ad-tracking choices is personal data where it can reasonably be linked to an identifier such as an IP address; a sector body that sets binding rules for such strings can be a joint controller even without access to the data, but not automatically for later ad processing by others.
Checked against the official source on 28 October 2026.
Only the judgment as published by the Court of Justice is authoritative. This is reference material, not legal advice.