GOOGLE LLC – Violation Found (France, 2021)

Violation Found
Commission Nationale de l'Informatique et des Libertés30 April 2021France
final
ePrivacy
Violation Found

The CNIL closed the case against Google after they adjusted their cookie settings to comply with regulations, ensuring clear information and options for rejecting cookies.

GDPR Articles Cited

Art. 7(GDPR)
Art. 82 Loi Informatique et Libertés GDPR

National Law Articles

Articles 20 et seq. loi no 78-17 du 6 janvier 1978 modifiée relative à l'informatique, aux fichiers et aux libertés
Décret no 2019-536 du 29 mai 2019 pris pour l'application de la loi no 78-17 du 6 janvier 1978 modifiée relative à l'informatique, aux fichiers et aux libertés

Entities Involved

GOOGLE LLC
GOOGLE IRELAND LIMITED
France enforcementCommission Nationale de l'Informatique et des Libertés actionsAll GOOGLE LLC actions
Full Legal Summary

The CNIL closed the case against Google after they adjusted their cookie settings to comply with regulations, ensuring clear information and options for rejecting cookies.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Violations (4)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Enforcement Actions (1)

Other enforcement actions involving GOOGLE LLC in FR

Current
Apr 2021

Violation Found

Fine
Sept 2025· Commission Nationale de l'Informatique et des Libertés

The French DPA has imposed a fine of EUR 200,000,000 on GOOGLE LLC. While creating an account for the controller's services, the controller designed t...

€200.0M

Similar Cases

Enforcement actions with similar violations

Data Subject versus Telecommunications Company

2025 · DPA OLGKoblenz

Legal Person

2023 · Úřad pro ochranu osobních údajů

€4K

ANSPDCP

2025 · Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

CNIL

2019 · Court of Justice of the European Union

Minister for Legal Protection

2022 · DPA RbOverijssel

Details

Decision Date

30 April 2021

Authority

Commission Nationale de l'Informatique et des Libertés

GDPRhub ID

gdprhub-3447

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. GOOGLE LLC - France (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: