Google and Amazon Fined a Total of $162 Million for Cookie Use Violations in France
The French Data Protection Authority, CNIL, fines companies for GDPR cookie consent violations.
Today, Dec.10, technology giants Google and Amazon got hit with a total fine of $162 million by the French Data Protection Authority, CNIL, for GDPR cookie consent violations.
CNIL fined Google a total of $120 million after an investigation carried out on March 16, 2020, revealed that Google.fr’s website placed advertising cookies automatically on users’ computers without obtaining prior consent from them.
According to the French regulator, Google LLC and Google Ireland were penalized for;
- Depositing tracking cookies in users’ computers without obtaining prior consent
- Providing insufficient information to users about the deployment of non-essential tracking cookies
- Partial failure of the "opt-out" mechanism for personalization of ads
Google’s fine is the biggest ever imposed in France for this type of breach.
In a separate announcement, the French DPA also fined e-commerce giant, Amazon, $42 million after investigations of Amazon.fr’s website between 12 December 2019 and 19 May 2020, revealed that cookies were automatically installed in consumers’ devices without any action required from them.
Amazon was fined for;
- Deploying tracking cookies without seeking consent from users
- Unclear information about the purposes of all tracking cookies placed in users’ devices
The fines against Google and Amazon were confirmed on CNIL’s website, and they are available in both French and English.
Complying with GDPR Cookie Consent with Secure Privacy
Secure Privacy offers a powerful consent management tool to help you ensure that you obtain prior consent for the use of non-essential cookies on your website.
It is essential to block non-essential plugins and tracking cookies until you have obtained consent from your users to deploy them on their devices.
Make your website compliant with these three simple steps
- Sign up for a free trial of our GDPR compliance solution
- Install the solution on your website
- Obtain GDPR-compliant cookie consent from users with our highly customizable cookie banners
Our free GDPR e-book provides a simplified step-by-step breakdown of the two laws to help you understand what you need to become compliant with the GDPR.
Additional Resources
- Learn more about cookie consent compliance in France with our simplified guide of CNIL’s Consent Guidelines.
- Read our detailed guide on how to comply with GDPR cookie consent requirements on your website
- Learn more about GDPR by downloading your free e-Book and get it delivered straight into your inbox
- Germany's 1&1 Telecom Fined $10.6 Million for a GDPR Violation
- Here are more of the highest GDPR fines enforced by regulators so far.
![How to Use Google Consent Mode v2 Outside the EEA and the UK](https://images.prismic.io/secure-privacy/Zp5NZh5LeNNTxWk3_HowtoUseGoogleConsentModev2byRegion.png?ixlib=gatsbyFP&auto=format%2Ccompress&fit=max&q=45)
How to Use Google Consent Mode v2 Outside the EEA and the UK
Discover why using Google Consent Mode v2 outside the EEA and the UK might be unnecessary. Learn about compliance requirements, the impact on data collection, and how to optimize your approach based on regional privacy laws.
- Europe GDPR
![The Impact of Special Purpose 3: Latest Amendments to the IAB Transparency and Consent Framework (TCF) V2.2 Policies by IAB Europe](https://images.prismic.io/secure-privacy/ZpUC_R5LeNNTxJ7o_TheImpactofSpecialPurpose3_LatestAmendmentstotheIABTransparencyandConsentFramework-TCF-V2.2PoliciesbyIABEurope.png?ixlib=gatsbyFP&auto=format%2Ccompress&fit=max&q=45)
The Impact of Special Purpose 3: Latest Amendments to the IAB Transparency and Consent Framework (TCF) V2.2 Policies by IAB Europe
Discover how the latest amendments to the IAB Transparency and Consent Framework (TCF) V2.2, particularly the introduction of Special Purpose 3 (SP3), are transforming user consent and transparency in the digital advertising ecosystem. Learn about the new requirements for protecting children's privacy, preventing dark patterns, and ensuring explicit consumer consent.
- Europe GDPR
![Understanding the Difference Between a PIA and DPIA in GDPR Privacy Risk Assessments](https://images.prismic.io/secure-privacy/ZonRuR5LeNNTw2___UnderstandingtheDifferenceBetweenaPIAandDPIAinGDPRPrivacyRiskAssessments.png?ixlib=gatsbyFP&auto=format%2Ccompress&fit=max&q=45)
Understanding the Difference Between a PIA and DPIA in GDPR Privacy Risk Assessments
Learn the key differences between Data Protection Impact Assessments (DPIAs) and Privacy Impact Assessments (PIAs). Understand their importance in ensuring compliance with privacy laws and best practices for mitigating privacy risks.
- Europe GDPR
- Data Protection