Share on LinkedInShare on LinkedIn

ARTICLE · 26 SEPTEMBER 2025

When The Cookie Crumbles: Lessons From The CNIL

Lewis Silkin
Lewis Silkin
Contributor
Lewis Silkin

Lewis Silkin

Joint managing partners: Jo Farmer, Richard Miskella International offices: Dublin, Hong Kong...

View firm profile
Explore more from Lewis Silkin

In September 2025, France's data protection authority (the CNIL) raided the digital cookie jar handing down hefty financial penalties to tech giant Google and fast-fashion powerhouse Shein.

FrancePrivacy

In September 2025, France's data protection authority (the CNIL) raided the digital cookie jar handing down hefty financial penalties to tech giant Google and fast-fashion powerhouse Shein. The reason was that according to the CNIL both companies failed to comply with regulations on the use of cookies – those tiny bits of data that file and track users online.

Background

In 2019, the CNIL "initiated an action plan by publishing guidelines and a recommendation on the use of cookies" to clarify how organisations must deploy cookies and similar tracking technologies placed on user devices. The objective was two-fold: to ensure compliance with the applicable legal framework and to guarantee that internet users receive transparent and clear information about the trackers deposited on their devices, in keeping with Article 82 of the French Data Protection Act (French DPA).

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from