CNIL fines Fnac 7 million euros for app tracking after users refused consent
France’s data protection authority fined two Fnac Darty companies a combined €7 million because the Fnac app kept sending browsing activity to a product recommendation service after users chose to continue without accepting. The regulator treated recommendation tracking as commercial targeting that needs consent. Fnac has one month to prove compliance or pay €10,000 per day of delay. The case began with a complaint from privacy group noyb in September 2023.
Our take
The big signal is not the fine, it is the ruling that personalised product recommendations need consent. If your app or site feeds browsing data to a recommendation engine, check what fires after a user declines. Test your consent banner on a fresh install this week, and have a fallback that recommends bestsellers instead of personal picks when consent is missing.


