GOOGLE LLC – Violation Found (France, 2021)

Violation Found
Commission Nationale de l'Informatique et des Libertés30 April 2021France
final
ePrivacy
Violation Found

The French data protection authority closed a case against Google after the company improved its cookie consent practices. This is important because it shows that companies must clearly inform users about cookies and give them easy options to accept or reject them.

What happened

Google adjusted its cookie settings to comply with regulations after being previously fined for unclear cookie information.

Who was affected

Users of Google services who interact with cookie consent banners.

What the authority found

The authority accepted Google's changes, stating that they now provide clear information about cookies and how to manage them.

Why this matters

This case sets a standard for how companies should handle cookie consent, emphasizing user choice and clarity. Businesses should ensure their cookie practices are transparent and user-friendly.

National Law Articles

AI-identified

Art. 82 Loi Informatique et Libertes

Entities Involved

GOOGLE LLC
GOOGLE IRELAND LIMITED
Source verified 11 April 2026
articles corrected
national law identified
amount discrepancy
Full Legal Summary
Detailed

On 7 December 2020, the CNIL fined Google €100,000,000 for not complying with the cookies regulation. The CNIL had also given Google a limited time to adapt their cookies settings to the current regulation, with a daily fine of €100,000 in case they did not carry out the necessary adjustments to start complying within the three following months. On 18 December 2020, Google sent a letter to the CNIL informing of their plan for compliance. After the CNIL's answer, on 30 March 2021 Google delivered to the CNIL the necessary information showing their adjustments for compliance. The CNIL accepted Google's reply on their adjustments, considering that the cookie banner and the cookies mechanisms used by google.fr were now sufficiently clear and provided adequate information about the cookies they use, including the purposes of the processing and information about how to reject them. Therefore, the CNIL decided to close the case. However, the authority stated that this [https://www.cnil.fr/fr/cloture-injonction-prononcee-encontre-google only refers to the precautionary measures took in their original decision], and that they reserve the right to further analysis of Google's compliance with the cookies regulation and their [https://www.cnil.fr/sites/default/files/atoms/files/recommandation-cookies-et-autres-traceurs.pdf recommendation issued on 17 September 2020], and to initiate a new sanctioning proceeding if necessary.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Violations (5)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Reject Harder Than Accept
critical

Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Similar Cases

Enforcement actions with similar violations

Details

Decision Date

30 April 2021

Authority

Commission Nationale de l'Informatique et des Libertés

GDPRhub ID

gdprhub-3447

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. GOOGLE LLC - France (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: