France Fines Google, SHEIN for Undercooked Cookie Policies
upstart writes:
France fines Google, SHEIN for undercooked cookie policies:
France's data protection authority levied massive fines against Google and SHEIN for dropping cookies on customers without securing their permission, and also whacked Google for showing ads in email service.
The Commission nationale de l'informatique et des libertes (CNIL) announced [source in French] the fines on Wednesday, and explained it found Google broke local laws as its signup process for new accounts, which encouraged users to approve use of cookies tied to advertising services, but didn't inform them that accepting those cookies was a condition for using Google's services.
The CNIL found Google's cookie advice mean locals created 74 million accounts under circumstances that breached French law, and 53 million people therefore saw ads in the "Promotions" and "Social" tabs of their email accounts.
The regulator fined Google LLC 200 million ($233 million) and levied a 125 million ($145 million) fine against Google Ireland for its role in the mess.
CNIL ordered [source in French] Chinese e-tailer SHEIN to pay 150 million ($175 million) for not properly securing permission before dropping cookies on 12 million people residing in France who visited shein.com.
The regulator found the Chinese site didn't properly explain how it used cookies, opting out of cookies had no effect because even if users clicked "Reject All" Shein sent more cookies anyway, and kept reading those already present.
CNIL's notice points out that in recent years it's found and punished many similar misuses of cookies, suggesting Shein should have understood its obligations.
Shein intends to appeal the decision. Google is reviewing it.
Diplomats are probably also poring over the CNIL's decision, given US president Donald Trump's recent warning that he could impose tariffs on nations which dare to regulate US tech companies.
Trump seems to regard other sovereign nations' digital regulations as illegitimate if they cost American companies money or slow their growth. CNIL argues that Google and Shein harmed local consumers by breaching their privacy.
Another reason for Trump's ire is that he feels regulators don't target Chinese companies. CNIL has proved him wrong on this occasion.
Read more of this story at SoylentNews.