Focus on the fashion and luxury industry: Key developments regarding antitrust, unfair commercial practices and privacy laws.
As 2025 draws to a close, we want to thank all our clients, partners, and readers for their continued support and collaboration throughout the year.
This holiday season, we wish you joy, peace, and a well-deserved rest with your loved ones.
From all of us at Norton Rose Fulbright, happy holidays and a successful New Year!
Vanity Fair Faces Regulatory Scrutiny Over Branded Content Practices
(Link source: Vanity Fair Faces Regulatory Scrutiny Over Branded Content Practices)
On November 20, 2025, the French Data Protection Authority (CNIL) imposed an administrative fine of €750,000 on LES PUBLICATIONS CONDÉ NAST for non-compliance with cookie consent requirements on its website vanityfair.fr.
The investigation began in 2019 following a complaint filed by the NGO NOYB and included several online inspections and hearings between 2019 and 2025. In 2021, the company was reminded of its obligations and formally instructed to obtain user consent before placing non-essential cookies. Despite implementing corrective measures, subsequent inspections in 2023 and 2025 revealed persistent violations of Article 82 of the French Data Protection Act, which transposes EU rules on cookies and electronic communications (Directive 2002/58/EC and the GDPR).
The CNIL identified four key breaches:
- Cookies placed without prior consent: Certain cookies were installed on users’ devices before any action was taken.
- Insufficient user information: Users were not properly informed about the nature and purpose of cookies, including those linked to advertising frameworks.
- Ineffective refusal mechanisms: Cookies continued to be deposited even after users refused consent.
- Ineffective withdrawal of consent: Cookies were still read on devices after consent had been withdrawn.
The CNIL emphasized the seriousness of these infringements, citing the large number of affected users (over 6 million in France between June and October 2023) and the repeated nature of non-compliance despite prior warnings. In setting the fine, the CNIL also considered Condé Nast’s financial capacity and the central role of cookies in its advertising model.
This decision reinforces the CNIL’s strict approach to enforcing cookie consent rules and highlights the need for companies to provide clear information and implement effective mechanisms for managing user consent.