CNIL
-

CNIL issued more than €486m in sanctions during 2025
The French Data Protection Authority’s work during 2025 includes a record €325m fine on Google.
-

Shein fined €150m by CNIL for placing cookies without consent
The e-commerce platform failed to comply with the French Data Protection Act.
-

Google fined €325m by CNIL for displaying ads and placing cookies without consent
The French Data Protection Authority found that more than 74 million accounts were affected by the breach relating to cookie consent.
-

The CNIL moves to self-assessment for consent-exempt analytics solutions
The new model places greater responsibility on providers, who must now assess their solution using a self-assessment tool provided by the regulator.
-

CNIL reports increased data breaches and complaints in France 2024
Personal data breaches increased 20%, and large breaches affected one million individuals 50%.
-

CNIL to streamline European data protection cooperation with new strategy
French authority wants to play central role in ensuring protection of personal data in Europe and internationally.
-

GRIP Country Guides: France
A first port of call for firms wishing to do financial services business in France – covering regulation, compliance and best practice.
-

Five DPAs commit to joint declaration on innovative and privacy-protecting AI
The data protection authorities aim to build a reliable governance framework for trusted AI.
