back

by pella·2y ago·view on hn ↗
> - no fines for non-compliance (or malicious compliance)

"The Biggest GDPR Fines of 2023"

1. Meta – €1.2 billion (Ireland)

2. Meta – €390 million (Ireland)

3. TikTok – €345 million (Ireland)

4. Criteo – €40 million (France)

5. TikTok – €14.5 million (UK)

6. Axpo Italia Spa – €10 million (Italy)

7. Tim S.p.A. – €7.6 million (Italy)

8. WhatsApp – €5.5 million (Ireland)

9. EOS Matrix – €5.5 million (Croatia)

10. Clearview AI – €5.2 million (France)

"GDPR fines are designed to make non-compliance around data security a costly mistake and they can be separated into two tiers. Less severe infringements can result in a fine of €10 million or 2% of a firm’s annual revenue from the preceding financial year, depending on which amount is higher. More serious violations can result in a fine of up to €20 million or 4% of a firm’s annual revenue from the preceding year, depending on what is higher."

via https://www.eqs.com/compliance-blog/biggest-gdpr-fines/

1 comments
Which ones of those fines were because of inappropriate use of cookie consent popups?

You just copy-pasted a list of GDPR fines.

> fines were because of inappropriate use of cookie consent popups?

see: "8 companies that faced cookie consent fines"

https://www.cookieyes.com/blog/cookie-consent-fines/

"In January 2023, France’s data protection watchdog, CNIL, fined TikTok €5 million ($5.4 million) for making it difficult to refuse cookies on its website. The CNIL found that TikTok manipulated consent by discouraging users from rejecting cookies. They required multiple clicks to refuse cookies, but only one click to accept them. TikTok resolved the issue by adding a “Refuse all” button to its site."