French CNIL Imposes Fine of 10 Million Euros on YahooCompany Fined for Dropping Advertising Cookies Without Consent
The National Commission on Informatics and Liberty - known as CNIL - received 27 complaints from French citizens about Yahoo cookies and web activity trackers placed on their devices while they had been using Yahoo.com and Yahoo Mail.
The complainants alleged that Yahoo's cookie policies failed to let them withdraw consent for advertising cookies without giving up access to Yahoo websites altogether. That violates the French Data Protection Act, which requires that consumers be allowed to freely withdraw consent, CNIL said. Conditioning withdrawal on giving up Yahoo altogether doesn't give consumers an opportunity to freely withdraw, it added in a statement.
The French regulator launched an investigation in 2021 and found that Yahoo had deposited at least 20 advertising cookies without obtaining adequate consent. More than 5 million consumers were affected over the course of 21 months, CNIL said, calling the company's behavior a "serious infringement of privacy" under French law.
The issue of user consent under the General Data Protection Regulation has turned into a multibillion-dollar question for American tech companies.