GOOGLE IRELAND LIMITED – €125,000,000 Fine (France, 2025)

€125,000,000Commission Nationale de l'Informatique et des Libertés1 September 2025France
final
ePrivacy
Fine

CNIL decision SAN-2025-004 of 1 September 2025 imposed EUR 200 million on Google LLC and EUR 125 million on Google Ireland Limited, a combined EUR 325 million. This record covers Google Ireland Limited's EUR 125 million fine. The decision concerns advertisements inserted between Gmail emails without consent and cookie consent during Google account creation.

What happened

The company used misleading banner messaging and did not provide proper cookie choices to users.

Who was affected

Users who interacted with Google's services were affected.

What the authority found

The authority found that Google Ireland Limited failed to comply with ePrivacy rules regarding cookie consent.

Why this matters

This ruling emphasizes the importance of transparency in data collection. Website operators should ensure their consent banners are clear and provide users with real choices.

National Law Articles

AI-identified

Art. 82 loi Informatique et Libertés
Article L. 34-5 CPCE

Entities Involved

Google LLC
€200,000,000
(Separate entity fine in SAN-2025-004)
Google Ireland Limited
€125,000,000
(Separate entity fine in SAN-2025-004)

Source checks

Linked-source text retrieved.

Review needed — 2 April 2026.

Processing notes: articles corrected, national law identified, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

CNIL decision SAN-2025-004 of 1 September 2025 imposed EUR 200 million on Google LLC and EUR 125 million on Google Ireland Limited, a combined EUR 325 million. This record covers Google Ireland Limited's EUR 125 million fine. The decision concerns advertisements inserted between Gmail emails without consent and cookie consent during Google account creation.

Violations (4)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

No Granular Cookie Choice
high

Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.

Art. 4(11) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for GOOGLE IRELAND LIMITED in FR

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

Details

Fine Date

1 September 2025

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€125,000,000

Enforcement Tracker ID

2863

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified
Cookie relevance: 100%

Cite as: Cookie Fines. GOOGLE IRELAND LIMITED - France (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: