The CNIL, France’s data privacy authority, fined Alphabet’s Google a record 150 million euros ($169 million) on Thursday for making it difficult for internet users to reject web trackers known as cookies.

According to the CNIL, Meta Platforms’ Facebook was also fined 60 million euros for the same reason.

Cookie consent is a crucial pillar of the European Union’s data privacy law and a primary goal for the CNIL. Cookies are little bits of data that help develop targeted digital marketing campaigns.

“Accepting cookies is as simple as clicking a button,” said Karin Kiefer, the CNIL’s head of data protection and sanctions. “It should be as simple to refuse cookies as it is to accept them.”

In its statement, the watchdog said it had found that the facebook.com, google.fr and youtube.com websites didn’t allow the refusal of cookies easily, citing Google’s video-streaming platform.

The CNIL said the two companies had three months to comply with its orders or face an extra penalty payment of 100,000 euros per day of delay.

These include the obligation for Google and Facebook to provide French internet users simpler tools for refusing cookies, in order to guarantee their consent.

The CNIL said that while Google and Facebook provided a virtual button to allow the immediate acceptance of cookies, there was no equivalent to refuse them as easily.

“People trust us to respect their right to privacy and keep them safe. We understand our responsibility to protect that trust and are committing to further changes and active work with the CNIL in light of this decision,” a Google spokesperson said.

Facebook did not immediately respond to a request for comment.

CNIL’s previous record fine in 2020 also targeted Google and amounted to 100 million euros.

At the time, the CNIL found that Google’s French websites didn’t seek the prior consent of visitors before advertising cookies were saved on computers and failed to provide clear information about how it intended to make use of them.

Kiefer said the issues have been resolved since then.

In 2020, the CNIL strengthened consent rights over ad trackers, saying websites operating in France should keep a register of internet users’ refusal to accept cookies for at least six months.

It also said internet users should be able to easily reconsider any initial agreement concerning cookies via a web link or an icon that should be visible on all the website pages.