SHEIN fined €150 million by CNIL for cookie consent violations
France’s CNIL fined SHEIN €150 million for placing tracking and advertising cookies on users’ devices before obtaining proper consent. The investigation revealed that cookie banners were incomplete, and even when users clicked “reject all,” certain cookies continued running.
SHEIN’s disclosures failed to fully disclose third-party tracking and did not account for users’ withdrawal of consent. The significant fine reflects multiple violations, the volume of data processed, and prior incidents involving the company. This case signifies CNIL’s stricter approach to cookie tactics and tracking without valid user control.