Support Centre

International: NOYB files complaint to CNIL against Google tracking code AAID

None of your business ('NOYB') announced, on 6 April 2021, that it had launched further action against Google LLC's tracking code, namely Android Advertising Identifier ('AAID'), in the form of a complaint filed to the French data protection authority ('CNIL') under the Directive on Privacy and Electronic Communications (2002/58/EC) (as amended) ('the ePrivacy Directive'). In summary, NOYB stated that AAID allows Google and all apps to track a user and combine information about online and mobile behaviour, without obtaining user consent to the same or allowing the user the ability to delete the installed AAID. 

Specifically, the complaint describes that the Android Operating System automatically associates each Android device to a unique string of characters known as the AAID, comparable to a tracking ID stored in a browser cookie, which Google and third parties can access. Further, the complaint submits that the storage of the AAID by Google into user devices and access to the AAID by Google and/or other third parties violates Article 5(3) of the ePrivacy Directive as implemented in France by Article 82 of the Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties (as amended to implement the GDPR).

Lastly, NOYB outlined that, since the complaint has been based on the ePrivacy Directive, CNIL can directly make a decision without the need for cooperation with other EU data protection authorities as under the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). 

You can read the press release here and the complaint here.