Shopify privacy law · France
Shopify cookie consent in France
France's CNIL is one of the most aggressive cookie-consent enforcers globally. Fines of €35M (Amazon) and €150M (Google) for cookie-banner failures alone.
Governing law: GDPR + ePrivacy (transposed via the Loi Informatique et Libertés)
Enforcement reality
The Commission Nationale de l'Informatique et des Libertés (CNIL) publishes a public 'sanctions' page and has fined dozens of companies for cookie-consent specifics — banners that don't have a Reject button as prominent as Accept, pre-ticked boxes, scroll-as-consent, etc. The CNIL also accepts complaints from individual French residents and acts on small-volume complaints.
Regulator: Commission Nationale de l'Informatique et des Libertés (CNIL)
Recent enforcement actions
- Amazon Europe Core·2020·€35M
Cookies dropped without consent on amazon.fr
- Google·2020·€150M
No 'reject all' button as prominent as 'accept all'
- Voodoo SAS·2022·€3M
Tracking via IDFV without consent
What Shopify merchants must do in France
- Opt-in consent before non-essential cookies — strictest enforcement in EU
- Reject button visually identical to Accept (CNIL 2020 guidelines)
- Privacy policy in French if you target French customers
- Cookie list with retention periods and purposes for each cookie
- 30-day response on DSARs — CNIL fines for delays
- Specific consent for each purpose — no bundled 'agree to everything'
How Consentico handles France
Consentico's geo-targeting detects France visitors at the edge and applies the right banner — opt-in posture for EU/UK rules, with Google Consent Mode v2 signals and a per-decision audit log. The banner survives Shopify theme switches and uninstalls cleanly.
Related concepts
- GDPREU regulation governing how organisations process personal data of EU/EEA residents. Applies to any Shopify store with EU visitors.
- ePrivacy DirectiveEU directive (2002/58/EC, amended 2009) requiring opt-in consent for cookies and similar storage. Enforced together with GDPR.
- Consent (GDPR)Freely given, specific, informed, and unambiguous indication of agreement. No pre-checked boxes, no implied consent from continued browsing.
Compliant in France — in five minutes.
Free for stores under 5,000 banner views per month. No code, no theme edits.