CNIL fined Orange €50 million for email advertising without consent and cookie-withdrawal failures
Company: Orange S.A.
Summary
On 14 November 2024, CNIL fined Orange €50 million after finding that it displayed advertising messages among users' emails without valid consent and continued reading cookies after users withdrew consent. CNIL also ordered Orange to stop the cookie practice; on 11 September 2025, CNIL closed that injunction after verifying compliance. Closure of the injunction does not erase the underlying infringement finding or fine. Primary sources: https://www.cnil.fr/en/advertisements-inserted-among-emails-orange-fined-eu50-million and https://www.cnil.fr/en/closure-injunction-issued-against-orange