France fines Google, Facebook millions over tracking consent

LONDON (AP) — French regulators on Thursday fined Google and Facebook a total of more than 200 million euros ($226 million) for not making it as easy for people to opt out of online tracking as it is for them to accept it.

The CNIL data privacy watchdog said its investigations found that while the U.S. online giants gave French users a single button to immediately accept cookies, there wasn't an equally simple way for them to decline because “several clicks are required to refuse all cookies."

Cookies are snippets of code used to target internet users for digital ads and other purposes. European governments have stricter regulations than the U.S. that require websites to ask for permission before tracking a user's activity. That means people face pop-up menus when they visit new websites, but there's been growing concern that many are configured to make it confusing or tedious if they don't want to give consent.

Visitors to Facebook, Google's French homepage and YouTube were being nudged to say yes, which meant they weren't freely giving their consent, a violation of French data protection rules, the CNIL said.

The French watchdog slapped Google with a 150 million euro ($170 million) penalty and Facebook with a 60 million euro ($68 million) fine. It also threatened daily fines of 100,000 euros if they don’t make it simpler for users in France to refuse cookies within three months.

Facebook, which has been renamed Meta, said it’s reviewing the decision and is committed to working with authorities.

“Our cookie consent controls provide people with greater control over their data, including a new settings menu on Facebook and Instagram where people can revisit and manage their decisions at any time, and we continue to develop and improve these controls,” the company...