
Here is a detailed article in English about the news from JETRO, presented in a polite tone:
Significant Fines Levied Against Google and Shein for Personal Data Protection Violations in France
Tokyo, Japan – September 9, 2025 – The French personal data protection authority, the National Commission on Informatics and Liberty (CNIL), has recently imposed substantial fines on two prominent global companies, Google and Shein, for violations of personal data protection regulations. This development underscores the increasing regulatory scrutiny and enforcement actions concerning data privacy across the European Union.
Google Fined €325 Million for Data Handling Practices
Google has been issued a penalty of €325 million (approximately JPY 54.6 billion, based on an indicative exchange rate) by the CNIL. The French authority found that Google infringed upon personal data protection laws in relation to how it processed user data for advertising purposes. Specifically, the CNIL’s investigation reportedly focused on the collection and use of data for personalized advertising without adequate consent mechanisms and transparency for users.
The penalties are a consequence of allegations that Google did not sufficiently inform users about its data processing activities and did not obtain proper consent for certain uses of their personal information, particularly in the context of targeted advertising. This ruling highlights the critical importance of clear, accessible, and consensual data handling practices, in line with the General Data Protection Regulation (GDPR) and related French legislation.
Shein Faces Penalty of €150 Million for Data Privacy Breaches
In a separate but equally significant action, fast-fashion retailer Shein has been fined €150 million (approximately JPY 25.2 billion, based on an indicative exchange rate). The CNIL’s decision against Shein appears to stem from concerns regarding the company’s data privacy practices, potentially including the collection, storage, and protection of customer data. While specific details of Shein’s infringements are still emerging, such penalties typically relate to issues such as insufficient data security measures, non-compliance with data minimization principles, or inadequate transparency regarding data processing.
These substantial fines serve as a strong reminder for all businesses, especially those operating internationally, to meticulously review and ensure their data handling processes are fully compliant with the stringent personal data protection laws enforced within the European Union. The CNIL’s actions demonstrate a firm commitment to upholding individuals’ data privacy rights and holding organizations accountable for any breaches of these fundamental principles.
Companies are strongly advised to prioritize data privacy by design and by default, ensuring robust consent management systems, transparent privacy policies, and secure data storage and processing mechanisms. Staying informed about evolving data protection regulations and proactively implementing best practices are crucial for mitigating risks and fostering trust with customers.
Source: JETRO (Japan External Trade Organization) Publication Date: September 9, 2025
フランス、個人情報保護法違反でグーグルに3億2,500万ユーロ、シーインに1億5,000万ユーロの罰金
AI has delivered the news.
The answer to the following question is obtained from Google Gemini.
日本貿易振興機構 published ‘フランス、個人情報保護法違反でグーグルに3億2,500万ユーロ、シーインに1億5,000万ユーロの罰金’ at 2025-09-09 07:25. Please write a detailed article about this news in a polite tone with relevant information. Please reply in English with the article only.