Cookie Regulation: CNIL imposes record fines on Google and Shein

For violating European regulations on the collection of personal data, the two companies have been ordered to pay €325 million and €150 million respectively.

On September 3, 2025, CNIL announced that it had imposed record fines on Google and Shein—€325 million and €150 million respectively—for breaching European rules on cookies. Both companies failed to comply with the requirement to obtain users’ “freely given and informed” consent before placing advertising trackers. The fine against Google is higher due to the number of accounts concerned in France, which exceeds 74 million.

CNIL also noted that Shein had “made changes to its website during the proceedings,” making any compliance orders unnecessary. Google, on the other hand, has not altered its data collection practices, which remain illegal. CNIL has given the tech giant six months to comply, under penalty of a daily fine of €200,000 for any delay.