La Quadrature du Net v. Amazon Europe Core
Case summary
CNIL found Amazon guilty of depositing cookies without prior consent and the failure to inform users about depositing cookie or the means to refuse them.
Our analysis
The CNIL discovered that Amazon.fr was placing a large number of cookies for advertising purposes on users' computers without their consent when they visited the site. The CNIL deemed this action to be a violation of the obligation to obtain user consent before depositing cookies, as these cookies were not essential to the service. The banner displayed on the Amazon.fr site was also found to be inadequate in informing users residing in France beforehand and clearly about the deposit of cookies, their objectives, and how to refuse them. Moreover, when users visited Amazon.fr after clicking on an advertisement published on another website, the same cookies were deposited without any banner being displayed. The CNIL found that Amazon committed two violations of Article 82 of the Data Protection Act by depositing cookies without prior consent and failing to inform users.
Outcome
The CNIL has levied a fine of 35 million euros on AMAZON EUROPE CORE. The fine is a result of the company's placement of advertising cookies on the computers of users of the Amazon.fr sales site without obtaining their prior consent or providing sufficient information about the use of cookies.
Parties
La Quadrature du Net through CNIL and Amazon Europe Core