Accor – €600,000 Fine (France, 2022)

€600,000Commission Nationale de l'Informatique et des Libertés3 August 2022France
final
ePrivacy
Fine

Accor was fined 600,000 euros by the French privacy authority for using pre-ticked consent boxes and failing to provide clear information about data use. This is important because it stresses the need for clear consent and transparency in data handling.

What happened

Accor used pre-ticked boxes for consent and failed to provide adequate information about data processing.

Who was affected

Hotel guests and website users who received unwanted promotional emails and lacked clear information about their data rights.

What the authority found

The authority found Accor violated GDPR by not obtaining valid consent and failing to inform users about data processing practices.

Why this matters

This case underscores the need for businesses to ensure consent is freely given and that users are fully informed about how their data is used. It highlights the risks of using pre-ticked boxes and inadequate privacy notices.

GDPR Articles Cited

AI-verified

Art. 13 GDPR
Art. 32 GDPR
Art. 12(1) GDPR
Art. 12(3) GDPR
Art. 15(1) GDPR
Art. 21(2) GDPR
Art. 83(1) GDPR
View original scraped data
Art. 12(1) GDPR
Art. 12(3) GDPR
Art. 13 GDPR
Art. 15(1) GDPR
Art. 21(2) GDPR
Art. 32 GDPR
Art. 55(1) GDPR
Art. 83(1) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. L.34-5 CPCE
Source verified 6 March 2026
articles corrected
national law identified
verified correct
Full Legal Summary
Detailed

Accor's website featured pre-ticked boxes for promotional consent, violating affirmative opt-in requirements.

Violations (3)

Pre-ticked Consent Boxes
high

Cookie consent checkboxes are pre-selected by default, violating the requirement for active, affirmative consent.

Art. 4(11) GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Cannot Withdraw Cookie Consent
critical

No accessible mechanism exists for users to withdraw previously given cookie consent.

Art. 7(3) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Accor in FR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

3 August 2022

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€600,000

GDPRhub ID

gdprhub-5193

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Accor - France (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: