French Data Protection Act Art 82
-

CNIL issued more than €486m in sanctions during 2025
The French Data Protection Authority’s work during 2025 includes a record €325m fine on Google.
-

Shein fined €150m by CNIL for placing cookies without consent
The e-commerce platform failed to comply with the French Data Protection Act.
-

Google fined €325m by CNIL for displaying ads and placing cookies without consent
The French Data Protection Authority found that more than 74 million accounts were affected by the breach relating to cookie consent.
-

The CNIL moves to self-assessment for consent-exempt analytics solutions
The new model places greater responsibility on providers, who must now assess their solution using a self-assessment tool provided by the regulator.
-

French operator Orange fined €50m for ads in users’ inboxes
The telecommunications operator interspersed adverts between emails without obtaining appropriate consent from millions of customers.
