b2b-daily
Home | IT | Cyber Security

France’s CNIL Slaps Yahoo with a 10 Million Euro Fine for Non-Compliance with User Cookie Preferences

Avatar photo
by Dwaine Evans
January 25, 2024
Image Credit: Unsplash 
France’s CNIL Slaps Yahoo with a 10 Million Euro Fine for Non-Compliance with User Cookie Preferences
Table of Contents
  1. Yahoo's non-compliance
  2. CNIL's ruling
  3. Previous fines and investigations
  4. Yahoo's Violations and Consequences

France’s data protection watchdog, the Commission nationale de l’informatique et des libertés (CNIL), has imposed a hefty fine of 10 million euros on Yahoo for its failure to respect users’ preferences regarding internet-tracking cookies. The fine comes after receiving several complaints and conducting extensive investigations to determine the extent of the violations.

Yahoo’s non-compliance

Despite the presence of a button that allowed users to reject cookies on the main Yahoo.com site, visitors still discovered approximately 20 digital trackers deposited for advertising purposes. Additionally, Yahoo Mail users who attempted to withdraw consent for cookies were faced with a warning implying that they would lose access to messaging and other Yahoo services. These blatant disregard for user preferences and the attempt to dissuade users from opting out of cookie tracking are clear violations of privacy and data protection regulations.

CNIL’s ruling

The CNIL’s decision to fine Yahoo takes into account the company’s failure to respect the choices made by internet users regarding cookies. With the enforcement of the European Union’s General Data Protection Regulation (GDPR) in 2018, internet companies have faced stricter rules requiring explicit user consent for cookies. Yahoo’s actions directly contravened these regulations and demonstrated a lack of regard for user privacy and the protection of personal data.

Previous fines and investigations

France has been rigorously enforcing data protection regulations, fining major tech companies like Google, Meta (formerly Facebook), Amazon, Microsoft, Apple, and even TikTok for breaches. The cumulative fines imposed on these companies have reached an astonishing total of nearly 400 million euros. As part of its role as a data protection authority, the CNIL conducted investigations in October 2020 and June 2021 following user complaints, ultimately leading to the findings against Yahoo.

Yahoo’s Violations and Consequences

The investigations by the CNIL revealed that Yahoo had not only failed to respect users’ refusals of cookies, but had also taken active measures to discourage users from withdrawing their consent. Such actions not only illustrate a lack of transparency and accountability on Yahoo’s part, but also a disregard for user choices and concerns. The fine of 10 million euros serves as a penalty for Yahoo’s non-compliance and blatant violation of user preferences regarding cookies.

The CNIL’s strict enforcement of data protection regulations in France sends a clear message to internet companies regarding the importance of respecting user choices when it comes to cookies. Companies must ensure that user consent is obtained in a transparent and meaningful manner, and any attempt to dissuade or manipulate users’ choices will be met with severe consequences. Yahoo’s case serves as a stark reminder that data privacy and user consent are paramount, and companies must adhere to these principles to foster trust and protect the rights of their users.

Information Security

Explore more

Sui vs. Ethereum: A Comparison of Scaling and Architecture
October 23, 2026

The Move programming language used by Sui treats digital assets as resources to eliminate reentrancy bugs at the compiler level rather than through manual audits. This fundamental innovation has established a new benchmark for smart contract safety at a time when the decentralized economy is processing trillions in annual volume. In the current landscape, the industry is witnessing a sophisticated

Can macOS Successfully Run on Snapdragon Windows Laptops?
October 23, 2026

The Snapintosh project serves as a technical blueprint for running high-end Apple software on a diverse range of Qualcomm-powered devices and portable devices. This initiative marks a definitive moment in the computing landscape as enthusiasts successfully navigate the transition from Intel-based systems to the highly efficient ARM architecture. The convergence of hardware standards in 2026 has allowed for a renewed

Vertice Launches AI-Driven Procure-to-Pay Platform
October 23, 2026

Strategic spend management requires more than passive record-keeping, moving instead toward agentic AI that identifies and corrects financial discrepancies automatically. Vertice has successfully transitioned from a specialized procurement utility into a robust, end-to-end financial ecosystem through the launch of its integrated Procure-to-Pay platform. This development represents a significant milestone for the company, which previously focused on the Intake-to-Procure segment of

Anthropic Launches Claude Duet Proactive AI Agent for Work
October 23, 2026

As a dedicated productivity tool, Claude Duet focuses primarily on professional and operational workflows rather than the casual personal errands handled by traditional voice assistants. This shift represents a fundamental change in how software interacts with the human workforce, moving away from the static request-response cycle that defined the early era of generative intelligence. By operating on a persistent cloud-based

Closing the Privilege Gap With Idira Integrated Governance
October 23, 2026

The mover phase of an employee lifecycle often becomes a security black hole where old permissions are retained while new ones are added to the profile. This specific phenomenon, frequently referred to as privilege creep, creates a widening gap between the access an individual actually requires and the expansive permissions they technically possess. In the current cybersecurity environment of 2026,