French Data Protection Authority Fines Fnac Darty €7 Million Following noyb Complaint
France’s data protection agency has penalized major electronics seller Fnac Darty €7 million for deploying unauthorized third-party trackers within its mobile application. This financial penalty stems from a legal complaint submitted by the privacy organization noyb in 2023. Beyond its primary French market, Fnac Darty operates commercially across several other European nations, including Switzerland, Belgium, Portugal, Italy, and Spain.
The original noyb action, launched in September 2023, targeted three separate French mobile platforms: MyFitnessPal, SeLoger, and Fnac Darty. The organization argued that these applications automatically intercepted and transmitted personal user information to outside entities for advanced analytical purposes immediately upon launch. Consumers were denied any opportunity to either permit or block this data transmission. This large-scale collection facilitates user profiling, enabling companies to deliver tailored advertisements and marketing initiatives designed to boost corporate profits.
Acting on the noyb filing, the French regulatory body initiated a formal inquiry into Fnac Darty during March 2024, ultimately validating the initial accusations. The agency determined that the retailer utilized a tracking mechanism without user permission, gathering browsing habits to generate product suggestions and improve its recommendation software. Regulators emphasized that utilizing personal information for targeted marketing strictly mandates user permission, a requirement Fnac Darty failed to satisfy.
A data protection attorney representing noyb noted that the regulatory outcome reinforces the necessity of consumer consent for personalized advertising tracking. While acknowledging that this sort of monitoring is pervasive throughout the industry, the legal representative expressed optimism that the ruling will establish a precedent for addressing unlawful tracking violations.
Ultimately, the regulatory body imposed the €7 million penalty because the retail chain neglected its legal duty to secure explicit user permission. Furthermore, authorities established that if the company fails to adhere to the ruling, it will incur an additional daily fine of €10,000.
Sources: Hacker News
Aggregated summary. Original: Hacker News