On May 18, 2021, the President of the CNIL sent around twenty formal notices to private and public organizations, including international players, on the grounds that they did not allow internet users to refuse cookies as easily as to accept them.
The CNIL, the French data protection authority, announced in April 2021 that in the event of breaches following checks or complaints, it could use the means at its disposal in its enforcement chain to issue formal notices or public sanctions.
The organizations concerned have one month to comply and face financial penalties of up to 2% of their turnover if this deadline is not met.
In its press release of May 25, 2021, the CNIL (French Data Protection Authority) indicated that this was the first campaign of audits and corrective measures since the deadline for bringing websites and mobile applications into compliance with the new cookie regulations had passed. Similar actions are expected to be carried out in the coming months, as this is one of the CNIL's priority areas for audits in 2021.