Skip to content

Published · Updated · France

GDPRHigh severityEnforcement action

French data protection authority fines Fnac Darty €7 million over illegal mobile app tracking

CNIL fined Fnac Darty €7 million for using third‑party trackers in its mobile app without user consent; a daily penalty of €10,000 applies if the decision is not complied with.

1 source · €7M penalty · CNIL

Illustration

What happened

- CNIL opened an investigation in March 2024 after a 2023 noyb complaint. - The authority found that Fnac Darty’s app placed trackers that collected browsing data without obtaining consent. - Processing personal data for targeted advertising under GDPR requires explicit user consent. - CNIL imposed a €7 million fine and warned of a €10,000 daily penalty for non‑compliance.

Why it matters

Other retailers using mobile apps must ensure any tracking or profiling technology is preceded by a clear, opt‑in consent mechanism, or risk similar enforcement. Review existing SDKs and data‑sharing contracts promptly.

Business impact

Failure to obtain consent can trigger substantial fines and ongoing daily penalties, increasing compliance costs and legal exposure.

Drafted automatically from the sources below. How we write summaries

Does this summary seem wrong?

What to check

  1. audit trackersHigh priority

    Identify all third‑party SDKs and trackers embedded in mobile apps and map the data they collect.

  2. implement consent flowHigh priority

    Deploy a GDPR‑compliant opt‑in consent banner that blocks tracking until users give explicit permission.

  3. document consent recordsMedium priority

    Maintain logs showing when and how each user gave consent for each tracking technology.

Discussion

No comments yet. Start the discussion.

Free account required