West News Wire: On Thursday, French regulators penalized Google and Facebook a combined sum of more than 200 million euros ($226 million) for not making it as simple to opt out of online monitoring as it is to accept it.
According to the CNIL data privacy authority, while the US web giants provided French users a single button to accept cookies instantly, there was no similarly simple method for them to deny since “several clicks are necessary to refuse all cookies.”
Cookies are little pieces of code that are used to target people for digital adverts and other reasons. European countries have more stringent laws than American ones, requiring websites to obtain permission before tracking a user’s behavior.
That means people face pop-up menus when they visit new websites, but there’s been growing concern that many are configured to make it confusing or tedious if they don’t want to give consent.
Visitors to Facebook, Google’s French homepage and YouTube were being nudged to say yes, which meant they weren’t freely giving their consent, a violation of French data protection rules, the CNIL said.
Facebook, which has been renamed Meta, said it’s reviewing the decision and is committed to working with authorities.
“Our cookie consent controls provide people with greater control over their data, including a new settings menu on Facebook and Instagram where people can revisit and manage their decisions at any time, and we continue to develop and improve these controls,” the company said.
Google said: “People trust us to respect their right to privacy and keep them safe. We understand our responsibility to protect that trust and are committing to further changes and active work with the CNIL in light of this decision.”
Cookies have been a longstanding source of privacy concerns because they can be employed to track users across the internet. They can be used to help remember someone’s website log-in details or more controversially, to record someone’s web-browsing history to target personalized ads.
The French penalty underscores a broader shift in the digital ad industry as Google and Facebook, which dominate the market, and regulators in Europe and the U.S. work on phasing out more egregious data collection practices. Google has announced plans to phase out so-called third party cookies used by advertisers from its Chrome browsers, though it will still be able to track users of its own services.