Users cannot consent to the “massive combination of their data and cannot oppose it, whether it is when they open an account or afterwards. They therefore have no control over these combinations,” the agency said in a statement issued on 16 May.
The regulator also accused Facebook of “unfair” tracking of people as they browse the internet through the cookie “datr”, without offering users sufficient information on this.
The CNIL stated that the cookie does not specify that data is collected on, and especially outside, of Facebook. Users may not fully understand that their data is systematically collected when they surf the internet. The commission ruled that this data collection via cookie is unfair.
In 2015, after Facebook announced changes to its data usage policy, the CNIL started investigating whether Facebook conforms to French law on informatics and civil liberties.