Skip to main content
All glossary terms
Legal & RegulatoryGlossary

CNIL

France's data protection authority (Commission nationale de l'informatique et des libertés) — enforces GDPR and the French Data Protection Act.

Reference definitionMetaTikTokGoogle AdsX

What CNIL means

The Commission nationale de l'informatique et des libertés (CNIL) is France's independent data protection authority, established under the 1978 French Data Protection Act and now the lead supervisory authority for the General Data Protection Regulation (GDPR) and the French implementation of the ePrivacy Directive in France. CNIL supervises consent for cookies and similar tracking technologies, processes complaints, conducts inspections, and issues binding decisions including financial penalties up to €20 million or 4% of worldwide turnover under GDPR. CNIL has issued significant fines against large platforms (Google, Meta, Amazon, TikTok) primarily over cookie consent UI design, lawful basis for advertising-related processing, and international data transfers. CNIL publishes its enforcement decisions, sanctions, and formal guidance through cnil.fr. AuditSocials monitors CNIL sanctions, formal notices, and published guidance affecting advertising and tracking on social platforms.

Related terms

Related Resources