France’s data protection regulator (CNIL) is proceeding firmly in its legal fight against cookie walls, by shooting two meaningful bullets at two giants of big tech — Google and Amazon.

On 7 December 2020, the CNIL imposed €100 million sanctions against Google (Google LLC and Google Ireland Limited) and a €35 million one against Amazon, for violating the e-Privacy Directive, over concerns about the transparency of cookies, the possibility to refuse cookies, and the informational architecture of cookie collection (which is accused of being based on an opaque and defective opt-out mechanism).