On 28 June 2018, the CNIL issued a statement on its website which says in bold letters that online advertising is a "top priority" for 2019. This leaves little room for doubt. The CNIL is not done with the ad tech business and, on the contrary, is just warming up.
Since the General Data Protection Regulation (GDPR) came into force in May 2018, the CNIL has issued four formal notices against Fidzup, Singlespot, Teemo and recently against Vectaury, all of whom are involved in the advertising business. The CNIL's formal notices come at a time when the advertising sector is still debating the alternative between “consent” and the controller’s ”legitimate interest" as a legal basis to process personal data for the purpose of targeting advertising. In the above-mentioned cases, the concerned intermediaries were extensively collecting location data from users' smartphones and combining them with other sets of data, which requires consent under the GDPR.