The French internet regulator announced this Thursday that has fined Google and Amazon for not respecting the legislation on cookies with 100 and 35 million euros respectively. The Alphabet search fine is also the highest financial penalty ever filed by this body.
The National Commission for Informatics and Freedoms has done so because the French websites of Google and Amazon they install advertising cookies on users’ computers “without their prior consent”, as they assure. They also accuse both US multinationals of lack of information.
Google’s fine is the highest ever filed by the French National Commission for Informatics and Freedoms
“They attack the privacy of Internet users in their daily digital life”
When the CNIL examined both portals, it pointed out that the information notices displayed they did not contain “sufficiently clear information so that the user knows what these cookies are for and how they can reject them”.
Google and Amazon will have to pay the sanctions that have been interposed, as well as modify the aforementioned warnings within a period of three months. If they are delayed, for each day they will receive a fine of 100,000 euros. Amazon France, in any case, changed the operation of its website in September and no longer installs these trackers without consent. Google also did the same on the same date.
Since September 2020, both companies have modified the operation of their French websites and no longer install ‘cookies’ without the consent of users
The National Commission of Informatics and Freedoms has also ensured that these discovered infractions “They threaten the privacy of Internet users in their daily digital life” given that “they allow to collect numerous information about people, without their consent, in order to later be able to offer them advertising”.
Both Google and Amazon have disagreed with the regulator’s decision and regret that it is not taken into account that the regulations in this regard are constantly evolving. It so happens that these sanctions have been produced not based on the General Data Protection Regulation of the European Union of 2018, but on a previous regulation. The sanctions based on the RGPD may take place from April 1, 2021.