Contact Us See a demo

Le Figaro fined €50,000 for lack of full cookie consent

le figaro fines banner
Published August 17, 2021

See the platform live

Ready to see DataAI Command Platform in action?

See how your team can discover sensitive data, reduce risk, and secure AI usage from one command center.

Book a demo
Demo BG Book a demo
Author

Omer Imran Malik

Data Privacy Legal Manager, Securiti

FIP, CIPT, CIPM, CIPP/US

Listen to the content

Can you keep up with cookie changes?

Le Figaro fined for lack of full cookie consent

Le Figaro is France’s largest circulation and oldest national daily newspaper, it started publishing in 1826, but times change and it is now one of the most popular French language news websites too.

In Summer 2021, Le Figaro was fined €50,000 (US$60,000) for failing to inform its website visitors about all the cookies placed on their devices & provide adequate information. Specifically, it was installing third-party advertising cookies without the users’ consent.

The French data protection regulator, the CNIL imposed the fines after checks showed that lefigaro.fr installed these cookies during 2020 and 2021.

The EU’s GDPR and ePrivacy Directive together define the use and management of cookies. Earlier this year, the CNIL released questions and answers to aid organizations that comply with the amended guidelines on the use of cookies and similar tracking technologies. To comply with the regulations, you must:

  • Provide accurate and specific information about the use of cookies including cookies for which user’s consent is not required and their purpose in plain language before consent is requested
  • Ask for and have received users’ consent before the cookies are placed on the machine (unless they are strictly necessary for the website to function)
  • Allow users to access your service even if they refuse to allow the use of certain cookies
  • Make it as easy for users to withdraw their consent as it was for them to give their consent in the first place
  • Document and store consent received from users
  • Request new consent, even from previous visitors, each time cookies change

The CNIL made it clear in its judgement that Le Figaro is jointly responsible together with the third party cookie vendors for any cookies on its site.
Securiti can help website owners by automating cookie consent compliance as explained and allow you to:

  • Track 1st and 3rd party code that runs on websites through continuous and periodic website scanning
  • Automatically classify cookies for accurate consent notification
  • Configurable preference center to allow organizations immediately honor consent revocations
  • Comply with global regulatory and compliance requirements such as GDPR, CCPA, ePrivacy Directive, IAB TCF 2.0 and more
  • Dynamic consent refresh every 6 months
  • Maintain comprehensive and granular consent records for audit and reporting
  • Customize the style, look and feel to align with your brand
  • Honor opt-out requests by automatically blocking non-essential cookies without any additional code

Also read CNIL FAQs on cookie guidelines here and ensure compliance with French requirements on the use of cookies and similar tracking technologies..

Your DataAI Command Platform

Enable Safe Use of Data and AI

See a demo

Analyze this article with AI

ChatGPT Claude Perplexity Grok
Prompts open in third-party AI tools.
Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox

More Stories that May Interest You
EU Digital Sovereignty View More
September 30, 2026
EU Digital Sovereignty is Moving from Policy to Procurement: What Organizations Need to Know
Digital sovereignty in Europe is moving from policy ambition toward something much more concrete: a framework that can determine how cloud services are assessed,...
Scaling Privacy Operations for the Agentic Era View More
June 3, 2026
Scaling Privacy Operations for the Agentic Era
Why Trusted AI Requires Operational Governance AI is creating extraordinary opportunities for organizations to move faster, unlock value from data, and transform how work...
Pseudonymized Data Constitute Personal Data Under GDPR View More
February 18, 2026
When Does Pseudonymized Data Constitute Personal Data Under GDPR?
1. Introduction On September 4, 2025, the Court of Justice of the European Union established binding principles on when pseudonymized data constitutes personal data...
Please enter a minimum of 3 characters to begin your search.

Type

Videos
View More
March 9, 2026
Rehan Jalil, Veeam on Agent Commander : theCUBE + NYSE Wired: Cyber Security Leaders
Following Veeam’s acquisition of Securiti, the launch of Agent Commander marks an important step toward helping enterprises adopt AI agents with greater confidence. In...
View More
January 20, 2025
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
January 15, 2025
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
January 2, 2025
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
December 24, 2024
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
November 1, 2024
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
October 29, 2024
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
August 12, 2024
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
June 3, 2024
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
January 29, 2024
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...

Spotlight Talks

Spotlight 00:00
AI Agents Unleashed? The Future of Identity & Data Access Security
Watch Now View
Spotlight 00:00
IDC Research: Why Data, AI, Identity and Access Security Must Come Together
Watch Now View
Spotlight 59:11
Data Controls for AI: Findings from the 2026 GigaOm DSPM Research
Watch Now View
Spotlight 1:02:06
Consent by proxy: When AI agents start deciding for us
Watch Now View
Spotlight 1:00:41
Future-Proofing for the Privacy Professional
Watch Now View
Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight
Choosing the Right DSPM: An Industry Analyst’s Perspective
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Latest
EU Digital Sovereignty View More
September 30, 2026
EU Digital Sovereignty is Moving from Policy to Procurement: What Organizations Need to Know
Digital sovereignty in Europe is moving from policy ambition toward something much more concrete: a framework that can determine how cloud services are assessed,...
Australia’s Office of AI: Why Annual Audits Miss What Your AI Can Reach View More
September 15, 2026
Australia’s Office of AI: Why Annual Audits Miss What Your AI Can Reach
Picture this: a fictional but entirely plausible scenario. An Australian financial institution's AI systems spend six months accessing a customer data repository nobody has...
View More
October 27, 2026
What Is LLMOps?
LLMOps runs LLMs in production, but most pipelines miss data security. Securiti’s latest blog covers the lifecycle, key risks, and best practices for closing...
Metadata Management View More
October 19, 2026
What Is Metadata Management? Definition, Benefits & Best Practices
Metadata management is the control plane for enterprise data. Securiti’s latest blog explains how it works, why passive catalogs go stale, and how it...
Saudi PDPL Compliance Toolkit View More
October 27, 2026
Saudi PDPL Compliance Toolkit
Turn Saudi PDPL requirements into action with practical checklists, a maturity self-assessment, and a 90-day plan for privacy and compliance leaders.
From Compliance to Continuous Assurance View More
October 20, 2026
From Compliance to Continuous Assurance: The Next Era of Saudi Data Protection
PDPL compliance didn’t end with the deadline. Learn how to comply with SDAIA enforcement requirements, govern cross-border transfers, and prepare your data for AI.
The PDPL Operational Lifecycle View More
October 21, 2026
The PDPL Operational Lifecycle
Find it. Fix it. Prove it. Repeat. Explore the 10-stage PDPL operational lifecycle, key deadlines, and the evidence regulators expect.
The Toxic Combination Problem in DataAI Risks View More
September 21, 2026
The Toxic Combination Problem in DataAI Risks
Discover how siloed security alerts create hidden toxic risk combinations and how correlated context helps reduce alert fatigue and uncover compound risks faster.
View More
February 18, 2026
Take the Data Risk Out of AI
Learn how to prepare enterprise data for safe Gemini Enterprise adoption with upstream governance, sensitive data discovery, and pre-index policy controls.
View More
December 22, 2025
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
What's
New