Published · France
GDPRCritical severityEnforcement action
French data protection authority fines Google €325 million over spam emails
The French DPA imposed a €325 million penalty on Google for spam‑email practices in Gmail and fined Conde Nast €750 000 for placing cookies without consent.
1 source · €325M penalty · French data protection authority
What happened
- The French data protection authority (CNIL) levied a €325 million fine against Google for violating GDPR rules with spam emails sent via Gmail.
- Both penalties were announced in the 2025 annual report of the privacy NGO noyb.
- The fines illustrate ongoing enforcement of GDPR consent and processing obligations across Europe.
Why it matters
Other online platforms that send bulk communications or deploy tracking cookies should audit consent mechanisms now to avoid similar large penalties.
Business impact
Companies may need to redesign email marketing and cookie consent workflows, incurring legal and technical costs, to ensure GDPR compliance and mitigate risk of multi‑hundred‑million‑euro fines.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
review email marketing practicesHigh priority
Ensure all bulk emails have a valid legal basis and clear opt‑out options under GDPR.
audit cookie consent bannersHigh priority
Confirm that all cookies are set only after explicit user consent and that records are retained.
Discussion
No comments yet. Start the discussion.