CNIL
France
France's data-protection authority, notable for aggressive enforcement of cookie-consent rules under the ePrivacy Directive.
6 penalties · ≈ $777.8M imposed
6 penalties
Google · Gmail · 2025
CNIL fines Google €325M over Gmail ads and cookies
The CNIL's largest cookie penalty against Google covered advertising inserted directly into Gmail inboxes without consent, alongside continued cookie-consent failures.
Google · 2022
CNIL fines Google €150M over hard-to-refuse cookies
The CNIL found that Google made refusing cookies far harder than accepting them, a dark-pattern design that did not amount to valid consent.
Google · 2020
CNIL fines Google €100M over advertising cookies
The CNIL fined Google for placing advertising cookies on users' devices without prior consent and without adequate information.
Microsoft · Bing · 2022
CNIL fines Microsoft €60M over Bing cookies
The CNIL fined Microsoft for depositing advertising cookies on bing.com without consent and for making it harder to refuse cookies than to accept them.
Google · 2019
CNIL fines Google €50M over Android ad consent
France's CNIL issued one of the first major GDPR fines, finding that Google lacked transparency and valid consent for ads personalisation during Android device setup.
Amazon · 2020
CNIL fines Amazon €35M over advertising cookies
The CNIL fined Amazon for placing advertising cookies on amazon.fr visitors' devices without consent or adequate information.