Commission Nationale de l'Informatique et des Libertés
Data protection authority of France
Total Actions
154
Total Fines
€1.8B
Average Fine
€16.1M
Among actions with fines
Enforcement Factor
3.00
Highly active
About Commission Nationale de l'Informatique et des Libertés
The Commission Nationale de l'Informatique et des Libertés is France's principal data protection regulator and one of Europe's most assertive enforcers of GDPR and ePrivacy rules. Commission Nationale de l'Informatique et des Libertés has taken 154 enforcement actions resulting in €1,765,775,500 in total penalties, with an average fine of €16.1M per sanctioned entity. With an enforcement factor of 3.0, Commission Nationale de l'Informatique et des Libertés ranks among Europe's most active GDPR and ePrivacy regulators, pursuing both large technology companies and smaller domestic businesses. Its most significant action was a €325,000,000 fine against Google LLC in 2025. Key enforcement areas include cookies placed before consent, unclear cookie information, no reject button. The most frequently cited legal basis in Commission Nationale de l'Informatique et des Libertés's decisions is Art. 32(GDPR) and Art. 13(GDPR).
Largest Fines by Commission Nationale de l'Informatique et des Libertés
View all actionsRecent Actions by Commission Nationale de l'Informatique et des Libertés
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 12 | €52.0M |
| 2020 | 17 | €138.6M |
| 2021 | 27 | €426.4M |
| 2022 | 22 | €123.8M |
| 2023 | 21 | €88.8M |
| 2024 | 31 | €68.0M |
| 2025 | 16 | €811.3M |
| 2026 | 8 | €57.0M |
Most Enforced Violations
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and ePrivacy actions has Commission Nationale de l'Informatique et des Libertés issued?
Commission Nationale de l'Informatique et des Libertés has issued 154 enforcement actions related to GDPR and ePrivacy, totaling €1.8B.
What is Commission Nationale de l'Informatique et des Libertés's largest GDPR and ePrivacy fine?
The largest was a €325.0M fine against Google LLC on 2025-09-01.
What violations does Commission Nationale de l'Informatique et des Libertés enforce most?
The most commonly enforced violations by Commission Nationale de l'Informatique et des Libertés are cookies placed before consent, unclear cookie information, no reject button.