Enforcement
EN INFINITE STYLES SERVICES CO. LIMITED: Insufficient legal basis for data processing
€150,000,000 fine - French Data Protection Authority (CNIL)
Content
The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name 'SHEIN'. The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.
GDPR Articles: Art. 82 loi Informatique et Libertés
Industry: Industry and Commerce