CNIL closes injunction against Google after compliance on cookie and Gmail ad consent

What happened

On 23 September 2026 the CNIL's restricted formation closed the injunction issued on 1 September 2025 against Google LLC and Google Ireland Limited. The companies complied by adding clear information about advertising cookies during account creation and by redesigning Gmail ads so they are clearly distinguished from private emails, removing the need for consent under article L.34-5. The closure follows a €325 million fine and a daily penalty of €100,000 for non‑compliance.

Why it matters for trust and compliance

• Its status is in effect. It is in force now.
• The decision demonstrates French regulator enforcement of privacy consent rules for cookies and email advertising.
• Takes effect September 23, 2026.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Inventory where this data is shared or sold and whether opt-outs are honoured.