Sanction RGPD French Data Protection Authority (CNIL) — INFINITE STYLES SERVICES CO. LIMITED : 150,0 M€ (2025)
- Autorité de contrôle
- French Data Protection Authority (CNIL)
- Pays
- France
- Entreprise / secteur
- INFINITE STYLES SERVICES CO. LIMITED
- Montant de l'amende
- 150,0 M€
- Date de la décision
- 1 septembre 2025
- Fondement juridique
- Art. 82 loi Informatique et Libertés
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name 'SHEIN'. The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.