Security Experts:

Connect with us

Hi, what are you looking for?



France Closes ‘Cookies’ Case Against Facebook

French privacy regulators on Thursday closed a case against Facebook after determining the US tech giant had changed the way it collected user data to comply with the law.

French privacy regulators on Thursday closed a case against Facebook after determining the US tech giant had changed the way it collected user data to comply with the law.

Facebook was slapped with a 60-million-euro ($61-million) fine last December when the French regulator CNIL ruled it was failing to allow users to easily opt out of cookies, tiny data files that track online browsing.

CNIL told the firm’s parent company Meta to fix the issue within three months or face further punishment.

On Thursday, the regulator announced that “the company had complied with the injunction issued” by installing a button labelled “only allow essential cookies”.

Cookies are installed on a user’s computer when they visit a website, allowing web browsers to save information about their session.

They are hugely valuable for tech platforms as ways to personalise advertising — the primary source of revenue for the likes of Facebook and Google.

But privacy advocates have long pushed back.

Since the European Union passed a 2018 law on personal data, internet companies have faced stricter rules that oblige them to seek consent from users before installing cookies.

Both Facebook and Google continue to face a slew of cases across Europe.

The French regulator stressed in its statement on Thursday that the end of this procedure did not rule out further scrutiny of Facebook, particularly of the requirement to give users “clear and complete” information on data collection.

“The CNIL therefore reserves the right to check the compliance of the website with these other requirements in the future and, if necessary, to resort to enforcement actions,” it said.

In response, Meta said Facebook’s cookie consent controls “provide people with meaningful options over their data, and the ability to revisit and manage their decisions at any time”.

“We continue to develop and improve these controls, including in response to regulator feedback,” a spokesperson said.

The French regulator hit Google with a 150-million-euro fine at the same time as Facebook was sanctioned.

Google said in April it had “completely overhauled” its approach as a result, though CNIL told AFP on Thursday that the case against Google was still open.

*updated with statement from Meta

Related: Facebook Agrees to Pay Fine in Cambridge Analytica Scandal

Related: France Fines Google, Amazon 135 Mn Euros

Related: Irish Regulator Fines Facebook for Privacy Law Violations

Written By

AFP 2023

Click to comment

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.


The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Management & Strategy

Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.


The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Management & Strategy

Tens of cybersecurity companies have announced cutting staff over the past year, in some cases significant portions of their global workforce.


US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...


Out of the 335 public recommendations on a comprehensive cybersecurity strategy made since 2010, 190 were not implemented by federal agencies as of December...

Management & Strategy

Microsoft making a multiyear, multibillion dollar investment in the artificial intelligence startup OpenAI, maker of ChatGPT and other tools.