GOOGLE LLC – €200,000,000 Fine (France, 2025)

€200,000,000Commission Nationale de l'Informatique et des Libertés1 September 2025France
final
ePrivacy
Fine

CNIL decision SAN-2025-004 of 1 September 2025 imposed EUR 200 million on Google LLC and EUR 125 million on Google Ireland Limited, a combined EUR 325 million. This record covers Google LLC's EUR 200 million fine. The decision concerns advertisements inserted between Gmail emails without consent and cookie consent during Google account creation.

What happened

Google LLC misled users about their cookie choices during the account creation process.

Who was affected

Users in France who created accounts for Google services.

What the authority found

The authority determined that Google designed its cookie consent process in a way that did not allow for free and informed consent.

Why this matters

This case highlights the need for transparent cookie consent processes. Companies should ensure users can easily understand and choose their cookie preferences.

National Law Articles
AI-identified
Art. 82 loi Informatique et Libertés
Article L. 34-5 CPCE

Entities Involved

Google LLC
€200,000,000
(Separate entity fine in SAN-2025-004)
Google Ireland Limited
€125,000,000
(Separate entity fine in SAN-2025-004)

Source checks

Linked-source text retrieved.

Review needed — 4 March 2026.

Processing notes: articles corrected, national law identified, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

CNIL decision SAN-2025-004 of 1 September 2025 imposed EUR 200 million on Google LLC and EUR 125 million on Google Ireland Limited, a combined EUR 325 million. This record covers Google LLC's EUR 200 million fine. The decision concerns advertisements inserted between Gmail emails without consent and cookie consent during Google account creation.

Violations (5)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

No Granular Cookie Choice
high

Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.

Art. 4(11) GDPR

Similar Cases

Enforcement actions with similar violations

Details

Fine Date

1 September 2025

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€200,000,000

GDPRhub ID

gdprhub-9488

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified
Cookie relevance: 100%

Cite as: Cookie Fines. GOOGLE LLC - France (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: