The reasonable period of time to bring websites and mobile applications into compliance with the new rules on cookies should not exceed 31 March 2021. The CNIL wished to raise awareness again among private and public organizations through a campaign of sending letters and emails, the opportunity to remind the presence of tools and practical advice on cnil.fr.
A large majority of public sector websites concerned
As part of its support and consulting mission, the CNIL wanted to contact a number of public bodies to encourage them to quickly audit their websites and mobile applications in order to take action, if necessary, and as quickly as possible, to meet the requirements of the regulations.
200 local authorities, ministries and government operators have received awareness-raising letters and emails. The CNIL also relied on certain public sector network heads (Association of French Mayors, Assembly of French Departments, Regions of France, Réseau Déclic, Conference of University Presidents, SupDPO) to ensure wide distribution of this campaign.
Indeed, the CNIL has noted that the vast majority of public sector websites do not fully comply, to date, with the legal provisions relating to cookies.
The CNIL has thus drawn attention to the need to take certain actions as soon as possible:
Deposition of cookies without prior consent: a hundred or so private actors informed by the CNIL (French Data Protection Authority)
The main results and the methodology applied are available on the website of LINC, the CNIL’s Digital Innovation Laboratory.
On the basis of these results and to make them aware of the risks incurred in the event of non-compliance, the CNIL has decided to send letters to websites with large audiences in France that deposit cookies from more than 6 third-party domains without prior consent. In parallel with its action towards public bodies, the CNIL has also reminded them that the reinforcement of the consent requirements set by the RGPD makes it necessary to develop interfaces for collecting the choices of users of applications or websites using tracking techniques (for example when they integrate content from external sources such as social network buttons).