On 31 December 2021, the French data protection authority (CNIL) has issued a sanction against two companies of the GOOGLE Group (GOOGLE LLC and GOOGLE IRELAND LIMITED) and the company FACEBOOK IRELAND LIMITED for failure to comply with Article 82 of the French Data Protection Act of 6 January 1978 as amended.
- facebook.com ;
- google.fr ;
Several clicks were necessary to refuse all the cookies, whereas a single click on the button provided for this purpose (“I accept” or “Accept cookies”) was sufficient to accept them all.
Consequently, the CNIL imposed the following financial penalties:
- 150 million euros against GOOGLE (90 million euros for GOOGLE LLC and 60 million euros for GOOGLE IRELAND LIMITED);
- 60 million against FACEBOOK IRELAND LIMITED.
Délibération SAN-2021-023 du 31 décembre 2021 – Légifrance (legifrance.gouv.fr)
Délibération SAN-2021-024 du 31 décembre 2021 – Légifrance (legifrance.gouv.fr)