from the Come-to-the-Dark-Side-we-have-cookies dept.
France fines Google, SHEIN for undercooked cookie policies:
France's data protection authority levied massive fines against Google and SHEIN for dropping cookies on customers without securing their permission, and also whacked Google for showing ads in email service.
The Commission nationale de l'informatique et des libertés (CNIL) announced [source in French] the fines on Wednesday, and explained it found Google broke local laws as its signup process for new accounts, which encouraged users to approve use of cookies tied to advertising services, but didn't inform them that accepting those cookies was a condition for using Google's services.
The CNIL found Google's cookie advice mean locals created 74 million accounts under circumstances that breached French law, and 53 million people therefore saw ads in the "Promotions" and "Social" tabs of their email accounts.
The regulator fined Google LLC € 200 million ($233 million) and levied a €125 million ($145 million) fine against Google Ireland for its role in the mess.
CNIL ordered [source in French] Chinese e-tailer SHEIN to pay €150 million ($175 million) for not properly securing permission before dropping cookies on 12 million people residing in France who visited shein.com.
The regulator found the Chinese site didn't properly explain how it used cookies, opting out of cookies had no effect because even if users clicked "Reject All" Shein sent more cookies anyway, and kept reading those already present.
CNIL's notice points out that in recent years it's found and punished many similar misuses of cookies, suggesting Shein should have understood its obligations.
Shein intends to appeal the decision. Google is reviewing it.
Diplomats are probably also poring over the CNIL's decision, given US president Donald Trump's recent warning that he could impose tariffs on nations which dare to regulate US tech companies.
Trump seems to regard other sovereign nations' digital regulations as illegitimate if they cost American companies money or slow their growth. CNIL argues that Google and Shein harmed local consumers by breaching their privacy.
Another reason for Trump's ire is that he feels regulators don't target Chinese companies. CNIL has proved him wrong on this occasion.
(Score: 2) by Gaaark on Sunday September 07, @12:03PM (5 children)
So make the punishment harsher ($145 million to Google is $20 to me); fine them
$1 Kazillion dollars, mu-ha-haa $Billion or 20 and see if they understand their obligations.--- Please remind me if I haven't been civil to you: I'm channeling MDC. I have always been here. ---Gaaark 2.0 --
(Score: 1, Interesting) by Anonymous Coward on Sunday September 07, @12:35PM
Make it a certain percentage of their wealth. 20% is a good starting point, go up from there on each subsequent offense.
(Score: 5, Insightful) by tom2tec on Sunday September 07, @01:16PM (1 child)
Fines never work when the crime pays more than the fine. Make the fine proportional to the size of the crime and force corporations to repay these effected directly and not just dump more money into government bureaucracies.
Words to men as air to birds.
(Score: 1, Insightful) by Anonymous Coward on Tuesday September 09, @01:04AM
Sending those responsible to prison can be more effective than fines in changing behavior of corporations. Bankrupting a corporation affects the workers and the customers.
There are many examples of bosses who happily enrich themselves at the expense of their own corporations. They don't care if their corporations go bankrupt, as long as they themselves get richer. https://www.fastcompany.com/91129776/what-really-killed-red-lobster-bankruptcy-private-equity [fastcompany.com]
But it's not as easy for them to enjoy their wealth in prison (unless it's one of those countries where they can walk in and out of prison unhindered).
(Score: 2, Interesting) by Anonymous Coward on Sunday September 07, @03:11PM
Even a couple of months in county jail would be worse than a huge fine. Well, LA County jail anyways. :p
(Score: 3, Informative) by arslan on Monday September 08, @01:15AM
Or... it doesn't even have to be a "big" fine, just make the $125m a fine payable from the Board and CEO/CxO's remuneration/bonuses instead of the shareholders paying for bad decisions by the board & CEO/CxOs who are all still getting big fat pay checks.