France

INFINITE STYLES SERVICES CO. LIMITED

150,000,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2025-09-01.

Rank · Sector

of 595 in Industry and Commerce

Rank · France

of 73

Rank · All fines

#12

of 3,039

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2025-09-01
Controller / Processor: INFINITE STYLES SERVICES CO. LIMITED
Sector: Industry and Commerce
Quoted Articles: Art. 82 loi Informatique et Libertés
Type of violation: Insufficient legal basis for data processing

Summary

The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name "SHEIN". The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.

Open original source Links to the regulator's original publication or another source.