IAB Europe is a controller (CJEU judgment)
On 7 March 2024, the CJEU ruled that IAB Europe is both an controller and a joint controller in the operation of the well-known "cookie bar". This judgment upholds a previous decision by the Belgian supervisory authority, which had previously fined IAB EUR 250k for multiple GDPR violations.