French administrative regulatory body CNIL has fined Amazon Europe Core €35m for breaching the country’s rules on advertising cookies.

The regulator conducted several checks between 12 December 2019 and 19 May 2020 on amazon.fr website.

It found that cookies were automatically placed on user’s computers without prior consent and not providing enough information.

The restricted committee, who is responsible for pronouncing sanctions, identified two violations made by Amazon under Article 82 of the French Data Protection Act.

CNIL in a statement said: “The restricted group took note of the recent changes made to the amazon.fr site and in particular the fact that no more cookies are now placed before the user has given his consent.

“It nevertheless considered that the new information banner deployed still did not allow Internet users residing in France to understand that cookies are mainly used to display personalised advertising to them and that they were still not clearly informed of their possibility to refuse these cookies.

How well do you really know your competitors?

Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.

Company Profile – free sample

Thank you!

Your download email will arrive shortly

Not ready to buy yet? Download a free sample

We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form

By GlobalData
Visit our Privacy Policy for more information about our services, how we may use, process and share your personal data, including information of your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.

“Therefore, in addition to the administrative fine, the restricted formation also adopted an injunction under penalty so that the company informs people in accordance with Article 82 of the Data Protection Act within three months from the notification of the decision.

“Otherwise, the company will be exposed to the payment of a fine of €100,000 per day of delay.”