Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

53 fines found

Total: $1.8B

DateCompanyFineRegulationAuthorityCountryTypeSummary
2025-09-01Google€325.0MGDPRFrance CNILFranceconsent
Gmail ads without consent and cookie manipulation.

Gmail ads without consent and cookie manipulation.

Articles: Art. 5, Art. 6

2025-09-01Google€325.0MGDPRFrance CNILFranceconsent
Gmail ads without consent and cookie manipulation.

Gmail ads without consent and cookie manipulation.

Articles: Art. 5, Art. 6

2025-09-01SHEIN€150.0MGDPRFrance CNILFranceconsent
Placing cookies without consent and non-functional opt-outs.

Placing cookies without consent and non-functional opt-outs.

Articles: Art. 5, Art. 6

2025-09-01SHEIN€150.0MGDPRFrance CNILFranceconsent
Placing cookies without consent and non-functional opt-outs.

Placing cookies without consent and non-functional opt-outs.

Articles: Art. 5, Art. 6

2025-09-01Google€125.0MGDPRFrance CNILFranceconsent
Cookie consent failures at account creation.

Cookie consent failures at account creation.

Articles: Art. 5, Art. 6

2025-09-01Google€125.0MGDPRFrance CNILFranceconsent
Cookie consent failures at account creation.

Cookie consent failures at account creation.

Articles: Art. 5, Art. 6

2021-12-31Google€90.0MGDPRFrench Data Protection Authority (CNIL)FranceNon-compliance with lawful basis for data processing
--

Articles: Art. 82 loi Informatique et Libertes

2021-12-31Meta Platforms€60.0MGDPRFrench Data Protection Authority (CNIL)FranceNon-compliance with lawful basis for data processing
--

Articles: Art. 82 loi Informatique et Libertes

2021-12-31Google€60.0MGDPRFrench Data Protection Authority (CNIL)FranceNon-compliance with lawful basis for data processing
--

Articles: Art. 82 loi Informatique et Libertes

2019-01-21Google€50.0MGDPRFrench Data Protection Authority (CNIL)FranceSeveral
--

Articles: Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 4 GDPR, Art. 5 GDPR

2019-01-21Google€50.0MGDPRFrench Data Protection Authority (CNIL)FranceSeveral
The French NGO “La Quadrature du Net” and the Austrian organization “None Of You...

The French NGO “La Quadrature du Net” and the Austrian organization “None Of Your Business” complained about the creation of a Google account related to the configuration of the Android system in a mobile phone. A fine of 50 million euros was issued because the following principles were not observed: the principle of transparency (Art. 5 GDPR), the sufficiency of information (Art.13 / 14 GDPR), and the presence of legal basis (Art. 6 GDPR).

Articles: Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 4 GDPR, Art. 5 GDPR

2023-06-15Criteo€40.0MGDPRFrance CNILFranceconsent
Ad-tech company failed to verify consent before processing data for personalized...

Ad-tech company failed to verify consent before processing data for personalized advertising.

Articles: Art. 7, Art. 15, Art. 17, Art. 26

2023-06-15Criteo€40.0MGDPRFrance CNILFranceconsent
Failed to verify consent before processing data for personalized advertising.

Failed to verify consent before processing data for personalized advertising.

Articles: Art. 7, Art. 15, Art. 17, Art. 26

2022-10-17Clearview AI€20.0MGDPRFrench Data Protection Authority (CNIL)FranceNon-compliance with lawful basis for data processing
--

Articles: Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 31 GDPR

2022-01-06Google€10.0MGDPRFrance CNILFranceconsent
Cookie consent mechanism did not allow users to refuse cookies as easily as acce...

Cookie consent mechanism did not allow users to refuse cookies as easily as accepting them.

Articles: Art. 82

2022-10-17Clearview AI€5.3MGDPRFrance CNILFranceconsent
Unlawful collection and use of biometric data of French residents.

Unlawful collection and use of biometric data of French residents.

Articles: Art. 6, Art. 9

2023-05-10Clearview AI€5.2MGDPRFrench Data Protection Authority (CNIL)FranceUnknown
--

Articles: Unknown

2024-12-01Telegram€5.1MGDPRFrance CNILFranceconsent
Multiple GDPR violations including failure to appoint representative.

Multiple GDPR violations including failure to appoint representative.

Articles: Art. 5, Art. 27

2024-12-01Telegram€5.1MGDPRFrance CNILFranceconsent
Multiple GDPR violations including failure to appoint EU representative.

Multiple GDPR violations including failure to appoint EU representative.

Articles: Art. 5, Art. 27

2020-11-18Carrefour France€2.3MGDPRFrench Data Protection Authority (CNIL)FranceMultiple
--

Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 32 GDPR, Art. 33 GDPR

2021-07-20SGAM AG2R LA MONDIALE€1.8MGDPRFrench Data Protection Authority (CNIL)FranceFailure to comply with data processing principles
--

Articles: Art. 5 (1) e) GDPR, Art. 13 GDPR, Art .14 GDPR

2022-04-15DEDALUS BIOLOGIE€1.5MGDPR French Data Protection Authority (CNIL)France Non-compliance with subjects' rights protection safeguards
--

Articles: Art. 28 GDPR, Art. 29 GDPR, Art. 32 GDPR

2022-06-23TotalEnergies Electricite et Gaz France€1.0MGDPRFrench Data Protection Authority (CNIL)FranceNon-compliance with subjects' rights protection safeguards
--

Articles: Art. 14 GDPR, Art. 15 GDPR, Art. 21 GDPR

2022-11-10Discord Inc.€800KGDPRFrench Data Protection Authority (CNIL)FranceFailure to implement sufficient measures to ensure information security
--

Articles: Art. 5 (1) e) GDPR, Art. 13 GDPR, Art. 25 (2) GDPR, Art. 32 GDPR, Art. 35 GDPR

2020-11-18Carrefour Banque€800KGDPRFrench Data Protection Authority (CNIL)FranceFailure to comply with data processing principles
--

Articles: Art. 5 GDPR

Page 1 of 3Next