The CNIL imposed a fine of €150,000 on KG COM for violations of the GDPR and the French Data Protection Act, relating to excessive data collection, data security, data breach notifications, and cookies.
The CNIL imposed a fine of EUR 40 million on CRITEO, an online advertising company, for their failure to verify that persons from whom they processed data had given consent.
The CNIL's action plan on cookies from 2020 to 2022 has had a substantial impact, leading to a high level of informed consent and refusal, better website practices and over €400 million in sanctions.