--- title: "France's CNIL fines two Fnac Darty companies €7 million over mobile app trackers placed without consent" description: "France's data protection authority fined two Fnac Darty companies a combined €7 million because the Fnac app sent users' identifiers and viewed products to a third party without prior consent. It set a €10,000-a-day penalty for non-compliance." url: "https://sonomos.ai/newsroom/cnil-fines-fnac-darty-7-million-app-trackers-without-consent/" type: NewsArticle publisher: "Sonomos Newsroom" published: "2026-11-03T14:20:00.000Z" updated: "2026-11-03T14:20:00.000Z" section: "Privacy" format: news tags: ["CNIL", "consent", "trackers", "mobile apps"] word_count: 454 corrections: 0 json: "https://sonomos.ai/newsroom/cnil-fines-fnac-darty-7-million-app-trackers-without-consent/index.json" sources: - title: "Sanction against FNAC DARTY PARTICIPATIONS ET SERVICES and FNAC DIRECT (deliberation SAN-2026-015)" publisher: "CNIL" url: "https://cnil.fr/fr/node/169092" - title: "NOYB win: French electronics retailer Fnac Darty fined €7 million" publisher: "noyb" url: "https://noyb.eu/en/noyb-win-french-electronics-retailer-fnac-darty-fined-eu7-million" --- # France's CNIL fines two Fnac Darty companies €7 million over mobile app trackers placed without consent France's data protection authority fined two Fnac Darty companies a combined €7 million because the Fnac app sent users' identifiers and viewed products to a third party without prior consent. It set a €10,000-a-day penalty for non-compliance. Published 2026-11-03 14:20 UTC · Privacy · News · 2 min read Sonomos Newsroom. URL: https://sonomos.ai/newsroom/cnil-fines-fnac-darty-7-million-app-trackers-without-consent/ France's data protection authority, the CNIL, has fined two companies in the Fnac Darty group a combined €7 million for using trackers in the Fnac mobile app without users' prior consent. According to [the CNIL's decision notice](https://cnil.fr/fr/node/169092), the restricted committee ruled on 22 October 2026 and the authority published the sanction on 29 October. ## What the CNIL decided The notice says the fine is split between two companies: €6 million for Fnac Darty Participations et Services and €1 million for Fnac Direct. The CNIL found a breach of article 82 of the French Data Protection Act (the Loi Informatique et Libertés), which governs trackers. It concluded that the trackers fell outside that article's exemptions and so could not be used without the prior consent of the people concerned. The notice describes what the trackers did. Requests sent through an API to a third-party domain carried an identifier that Fnac assigned to each user, together with activity data such as the products they viewed. The CNIL says the data was used to build a browsing history, to show personalised product recommendations and to train the recommendation algorithm. It says the amount of the fine reflects, among other things, users' expressed refusal of tracking and the size of the app's user base. ## Orders and penalty The CNIL ordered the companies to show, within one month of notification, that the new tool they now use can collect consent. If they do not, the notice sets a penalty of €10,000 per day of delay. The authority also ordered the decision to be published, citing the seriousness of the breach, the scope of the processing and the number of people affected. ## How the case started [noyb's account of the decision](https://noyb.eu/en/noyb-win-french-electronics-retailer-fnac-darty-fined-eu7-million) says the privacy group filed three complaints in France in September 2023, against the SeLoger, MyFitnessPal and Fnac Darty apps. For Fnac Darty, the complaint alleged that personal data was accessed and shared with third parties for analytics as soon as the app opened, and that users had no way to consent or refuse. noyb says the CNIL opened its own investigation in March 2024 and confirmed the findings. The CNIL notice also dates its inspection of the app to March 2024. noyb lawyer Lisa Steinfeld Leiser is quoted saying the CNIL "made once again very clear that processing people's data for personalised advertising requires consent." ## What is unresolved The sources we read do not say whether the companies will appeal, and the CNIL notice we read does not include a statement from Fnac Darty. Whether the replacement tool meets the CNIL's requirements will be tested by the one-month demonstration the decision requires. This summary reports what the CNIL and noyb say; it is not legal advice. ## Sources 1. [Sanction against FNAC DARTY PARTICIPATIONS ET SERVICES and FNAC DIRECT (deliberation SAN-2026-015)](https://cnil.fr/fr/node/169092), CNIL, published 2026-10-29, accessed 2026-11-03 2. [NOYB win: French electronics retailer Fnac Darty fined €7 million](https://noyb.eu/en/noyb-win-french-electronics-retailer-fnac-darty-fined-eu7-million), noyb, published 2026-10-29, accessed 2026-11-03 ## How this story was checked Automated source check, 2026-11-03 14:19 UTC. Each claim below was compared with the source it cites before publication. What that check does and does not cover: https://sonomos.ai/newsroom/standards/ - The CNIL fined Fnac Darty Participations et Services €6 million and Fnac Direct €1 million, €7 million in total, in a decision dated 22 October 2026 and published on 29 October. (source 1: https://cnil.fr/fr/node/169092) - The CNIL found the trackers could not be used without prior consent under article 82 of the Loi Informatique et Libertés. (source 1: https://cnil.fr/fr/node/169092) - The companies must show within one month of notification that their new tool collects consent, or face a €10,000 penalty per day of delay. (source 1: https://cnil.fr/fr/node/169092) - The case began with noyb complaints filed in September 2023, and the CNIL inspected the app in March 2024. (source 2: https://noyb.eu/en/noyb-win-french-electronics-retailer-fnac-darty-fined-eu7-million) Tags: CNIL · consent · trackers · mobile apps ## About the publisher The Sonomos Newsroom is published by Sonomos, which makes Locke, desktop software that detects sensitive data on the user's device and masks it before a prompt reaches an AI service. https://sonomos.ai/locke/ General information about privacy, security and AI, not legal advice. Laws and guidance change; check the dates above and the sources cited before relying on anything here.