Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
53 fines found
Total: $1.8B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2025-09-01 | €325.0M | GDPR | France CNIL | France | consent | Gmail ads without consent and cookie manipulation.Gmail ads without consent and cookie manipulation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | €325.0M | GDPR | France CNIL | France | consent | Gmail ads without consent and cookie manipulation.Gmail ads without consent and cookie manipulation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | SHEIN | €150.0M | GDPR | France CNIL | France | consent | Placing cookies without consent and non-functional opt-outs.Placing cookies without consent and non-functional opt-outs. Articles: Art. 5, Art. 6 |
| 2025-09-01 | SHEIN | €150.0M | GDPR | France CNIL | France | consent | Placing cookies without consent and non-functional opt-outs.Placing cookies without consent and non-functional opt-outs. Articles: Art. 5, Art. 6 |
| 2025-09-01 | €125.0M | GDPR | France CNIL | France | consent | Cookie consent failures at account creation.Cookie consent failures at account creation. Articles: Art. 5, Art. 6 | |
| 2025-09-01 | €125.0M | GDPR | France CNIL | France | consent | Cookie consent failures at account creation.Cookie consent failures at account creation. Articles: Art. 5, Art. 6 | |
| 2021-12-31 | €90.0M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with lawful basis for data processing | --Articles: Art. 82 loi Informatique et Libertes | |
| 2021-12-31 | Meta Platforms | €60.0M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with lawful basis for data processing | --Articles: Art. 82 loi Informatique et Libertes |
| 2021-12-31 | €60.0M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with lawful basis for data processing | --Articles: Art. 82 loi Informatique et Libertes | |
| 2019-01-21 | €50.0M | GDPR | French Data Protection Authority (CNIL) | France | Several | --Articles: Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 4 GDPR, Art. 5 GDPR | |
| 2019-01-21 | €50.0M | GDPR | French Data Protection Authority (CNIL) | France | Several | The French NGO “La Quadrature du Net” and the Austrian organization “None Of You...The French NGO “La Quadrature du Net” and the Austrian organization “None Of Your Business” complained about the creation of a Google account related to the configuration of the Android system in a mobile phone. A fine of 50 million euros was issued because the following principles were not observed: the principle of transparency (Art. 5 GDPR), the sufficiency of information (Art.13 / 14 GDPR), and the presence of legal basis (Art. 6 GDPR). Articles: Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 4 GDPR, Art. 5 GDPR | |
| 2023-06-15 | Criteo | €40.0M | GDPR | France CNIL | France | consent | Ad-tech company failed to verify consent before processing data for personalized...Ad-tech company failed to verify consent before processing data for personalized advertising. Articles: Art. 7, Art. 15, Art. 17, Art. 26 |
| 2023-06-15 | Criteo | €40.0M | GDPR | France CNIL | France | consent | Failed to verify consent before processing data for personalized advertising.Failed to verify consent before processing data for personalized advertising. Articles: Art. 7, Art. 15, Art. 17, Art. 26 |
| 2022-10-17 | Clearview AI | €20.0M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 31 GDPR |
| 2022-01-06 | €10.0M | GDPR | France CNIL | France | consent | Cookie consent mechanism did not allow users to refuse cookies as easily as acce...Cookie consent mechanism did not allow users to refuse cookies as easily as accepting them. Articles: Art. 82 | |
| 2022-10-17 | Clearview AI | €5.3M | GDPR | France CNIL | France | consent | Unlawful collection and use of biometric data of French residents.Unlawful collection and use of biometric data of French residents. Articles: Art. 6, Art. 9 |
| 2023-05-10 | Clearview AI | €5.2M | GDPR | French Data Protection Authority (CNIL) | France | Unknown | --Articles: Unknown |
| 2024-12-01 | Telegram | €5.1M | GDPR | France CNIL | France | consent | Multiple GDPR violations including failure to appoint representative.Multiple GDPR violations including failure to appoint representative. Articles: Art. 5, Art. 27 |
| 2024-12-01 | Telegram | €5.1M | GDPR | France CNIL | France | consent | Multiple GDPR violations including failure to appoint EU representative.Multiple GDPR violations including failure to appoint EU representative. Articles: Art. 5, Art. 27 |
| 2020-11-18 | Carrefour France | €2.3M | GDPR | French Data Protection Authority (CNIL) | France | Multiple | --Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 32 GDPR, Art. 33 GDPR |
| 2021-07-20 | SGAM AG2R LA MONDIALE | €1.8M | GDPR | French Data Protection Authority (CNIL) | France | Failure to comply with data processing principles | --Articles: Art. 5 (1) e) GDPR, Art. 13 GDPR, Art .14 GDPR |
| 2022-04-15 | DEDALUS BIOLOGIE | €1.5M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 28 GDPR, Art. 29 GDPR, Art. 32 GDPR |
| 2022-06-23 | TotalEnergies Electricite et Gaz France | €1.0M | GDPR | French Data Protection Authority (CNIL) | France | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 14 GDPR, Art. 15 GDPR, Art. 21 GDPR |
| 2022-11-10 | Discord Inc. | €800K | GDPR | French Data Protection Authority (CNIL) | France | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) e) GDPR, Art. 13 GDPR, Art. 25 (2) GDPR, Art. 32 GDPR, Art. 35 GDPR |
| 2020-11-18 | Carrefour Banque | €800K | GDPR | French Data Protection Authority (CNIL) | France | Failure to comply with data processing principles | --Articles: Art. 5 GDPR |