The country’s internet watchdog said on Thursday that Google and Amazon did not gain users’ consent or provide details on how to change the settings.

Google and Amazon have been tracking users without permission to serve them ads, a violation of French law, the country’s internet watchdog said as it issued fines totaling $163 million on Thursday. 
Google was being fined $120 million and Amazon $42 million, said the Commission Nationale de l’Informatique et des Libertés (CNIL). The government watchdog said both companies had placed tracking cookies on users’ computers without getting prior consent, then didn’t provide adequate information on how to change cookie settings.  
Both companies defended their practices, saying they aim to give visitors all the information needed to change how they’re tracked online. 
“We disagree with the CNIL’s decision,” an Amazon spokesperson said via email. 
Amazon said: “Protecting the privacy of our customers has always been a top priority for Amazon. We continuously update our privacy practices to ensure that we meet the evolving needs and expectations of customers and regulators and fully comply with all applicable laws in every country in which we operate.”
Google visitors “expect us to respect their privacy, whether they have a Google account or not,” a company spokesperson said via email. 
Said the spokesperson: “We stand by our record of providing upfront information and clear controls, strong internal data governance, secure infrastructure, and above all, helpful products. Today’s decision under French ePrivacy laws overlooks these efforts and doesn’t account for the fact that French rules and regulatory guidance are uncertain and constantly evolving. We will continue to engage with the CNIL as we make ongoing improvements to better understand its concerns.”
When CNIL investigators visited in March, they “found that when a user visited this website, cookies were automatically placed on his or her computer, without any action required on his or her part. Several of these cookies were used for advertising purposes,” according to a statement. 
CNIL investigators said Amazon deposited similar cookies when they visited between December 2019 and May 2020. 
Amazon CEO Jeff Bezos.
MARK RALSTON/AFP via Getty Images
Both companies had violated Article 82 of the French Data Protection Act, according to CNIL. Both companies had deposited cookies without “obtaining the prior consent of the user” and also failed to provide “complete” information on how cookies were used, according to statements released on Thursday. 
CNIL took aim at the company’s disclaimer text, which for Google said, “Privacy reminder from Google,” and for Amazon said, “By using this website, you accept our use of cookies allowing to offer and improve our services. Read more.”
Neither text gave visitors a clear way to stop the sites from tracking them, said CNIL. 
Amazon on Thursday said visitors to – as well as other European Union, United Kingdom and Turkish stores – were able to update their cookie preferences “at any time.” The company uses cookies to serve ads, of course, they’re also there to give shoppers “the essential features” of the Amazon shopping experience, the company said. 
CNIL said Google had a third violation, too. Even after CNIL investigators turned off ad personalization, “one of the advertising cookies was still stored on his or her computer and kept reading information aimed at the server to which it is attached,” said CNIL. 
The fines were issued December 7, but announced Thursday. If either Google or Amazon doesn’t update its cookie settings within three months, the company would be fined an additional $120,000 for each day it delays, said CNIL.