On June 30, 2015, the French Data Protection Authority, the Commission Nationale de l’Information et des Libertés (“CNIL”), issued notices to 20 websites asking them to comply with the European Union’s Cookie Rules (“Rules”). These letters follow one year after the CNIL conducted a “cookie sweep” of 24 spot checks, 27 online checks, and 2 hearings on the topic. The enforcement notices requested that companies come into compliance with requirements of the Rules within three months, or the company may face a fine of up to €150,000 for a first offence.
Finally, the CNIL noted that the Rules apply not only to operators of websites, but to all aspects of the online ecosystem, including advertising agencies. These notices indicate continued attention by European regulators to cookies, and the online advertising industry in general.