'There is a problem that cookie denial is more difficult than permission', France demands Google and Facebook to implement the 1-click cookie denial function and fines 27.5 billion yen

'Google, YouTube and Facebook are not designed to make cookie denial as easy as accepting cookies,' the National Personal Information Protection Agency (CNIL), which oversees the protection of personal data in France, told Google. We have fined 150 million euros (about 19.6 billion yen) and Facebook 60 million euros (about 7.86 billion yen). Both companies are also required to implement a function that allows cookies to be rejected as easily as accepting cookies with a single click.

Cookies: the CNIL fines GOOGLE a total of 150 million euros and FACEBOOK 60 million euros for non-compliance with French legislation | CNIL

Cookies: GOOGLE fined 150 million euros | CNIL
https://www.cnil.fr/en/cookies-google-fined-150-million-euros

Cookies: FACEBOOK IRELAND LIMITED fined 60 million euros | CNIL
https://www.cnil.fr/en/cookies-facebook-ireland-limited-fined-60-million-euros

France fines Google, Facebook over cookies | News | DW | 06.01.2022
https://www.dw.com/en/france-fines-google-facebook-over-cookies/a-60345633

According to CNIL, a lot of users reported that 'I do not know how to refuse cookies on Google, YouTube, Facebook', so I conducted a survey and found that it was possible to accept cookies with one click etc. On the other hand, cookie denial required several clicks.

In addition, on Facebook, a button to reject cookies was placed at the bottom of the second window that opens, and it was titled 'Accept Cookies'.

This kind of design that deliberately deceives the user is called a 'dark pattern' and is regarded as a problem.

What is a dark pattern? Explaining what 'dark patterns' of web design are to trick users | GIGAZINE.BIZ


CNIL violates Article 82 of the French Data Protection Act by Google and Facebook, saying that making the cookie denial procedure difficult would force users to give up cookie denial and agree to accept cookies. I decided that it was.

Google will be fined € 150 million and Facebook will be fined € 60 million based on the scope of data collection by Cookies, the number of related data, and advertising revenue indirectly generated from the obtained data. increase.

In addition, Google and Facebook are required to implement and provide users with features that make cookie denial as easy as accepting within three months of making a decision. If it cannot be provided, a fine of 100,000 euros (about 13 million yen) may be imposed for each day delayed.