France

Google LLC

50,000,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2019-01-21.

Rank · Sector

#16

of 369 in Media, Telecoms and Broadcasting

Rank · France

of 74

Rank · All fines

#20

of 3,050

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2019-01-21
Controller / Processor: Google LLC
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 5 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The fine was imposed on the basis of complaints from the Austrian organisation "None Of Your Business" and the French NGO "La Quadrature du Net". The complaints were filed on 25th and 28th of May 2018 - immediately after the GDPR became applicable. The complaints concerned the creation of a Google account during the configuration of a mobile phone using the Android operating system. The CNIL imposed a fine of 50 million euros for lack of transparency (Art. 5 GDPR), insufficient information (Art. 13 / 14 GDPR) and lack of legal basis (Art. 6 GDPR). The obtained consents had not been given "specific" and not "unambigous" (Art. 4 nr. 11 GDPR).

Open original source Links to the regulator's original publication or another source.