Compliance Radar · Privacy and consent
CNIL fines Google €325 million and Shein €150 million over cookies, then keeps fining
France fined Google and Shein 475 million euros combined for cookies set without consent.
- Status
- Fines imposed. Google's injunction closed September 23, 2026; other appeals unconfirmed as of October 2026.
- Takes effect
- On each decision
- Announced
- Sep 3, 2025 (decisions of September 1, 2025); Nov 27, 2025 (Condé Nast); Jan 22, 2026 (unnamed retailer)
- Type
- enforcement
What changed
Google was fined €325 million over Gmail ads and sign-up cookies without valid consent; Shein €150 million for cookies set before any choice and after 'Refuse all'. Condé Nast was fined €750,000 in November 2025, an unnamed company €3.5 million in January 2026.
Who it affects
Any site or app that sets cookies on users' devices in France.
What to do
- Load no ad or analytics cookies before consent.
- Make 'Refuse all' stop new and existing cookies.
- Get separate consent before uploading customer lists for ads.
What ComplyMo already handles
Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.
Sources
- CNIL: Google fined €325 million (opens in a new tab)
- CNIL: Shein fined €150 million (opens in a new tab)
- CNIL: vanityfair.fr publisher fined €750,000 (opens in a new tab)
- CNIL: €3.5 million fine (opens in a new tab)
Summary of public sources, not legal advice.