CNIL Closes Injunction Against VOODOO for Violation of French Data Protection Act

On July 13, 2023, the CNIL's restricted committee closed the injunction issued against VOODOO, a mobile game publisher, on December 29, 2022, for using an essentially technical identifier (IDFV) for advertising purposes, without the user's consent. The restricted committee imposed a fine of 3 million euros and ordered the company to obtain the user's consent for the use of the IDFV for advertising purposes within three months or face a fine of 20,000 euros per day of delay. The restricted committee concluded that VOODOO had complied with the injunction by presenting a window enabling user consent when games are opened, within the time limit set. However, this closure decision does not prejudge the CNIL's analysis of the compliance of the new consent window implemented on the applications developed by the company with all the provisions of article 82 of the French Data Protection Act. The CNIL therefore reserves the right to check the compliance and may mobilize the entire repressive procedure if necessary.