|
|
Extract from an article by Emily Dorner
This weekend, Google was fined 50 million euros (over $55 million) by France’s Data Privacy Authority, CNIL, for breaching Europe’s General Data Protection Regulation.
According to the CNIL, Google did not obtain sufficient user’s consent prior to collecting information for the purpose of showing personalized ads. The CNIL also concluded that Google failed to properly disclose to users how their personal information is collected by the company, and how it is used. The French privacy regulator found issues with a variety of Google’s practices such as placing information regarding data processing purposes, data storage periods, or the categories of personal data used for ad personalization in locations “excessively disseminated” across various documents and requiring the user to follow many different links; the lack of clarity (read: transparency) of the explanatory materials provided to users; requiring users to accept all terms and conditions in order to create accounts, the alternative to which would be not to use any of Google’s many services at all; and burying the options to change settings for ads personalization, as well as pre-ticking the box to allow it. As a result, the CNIL found that the legal basis for processing personal data was unclear, was not necessarily for the legitimate interest of the company, and that any consent provided by users was not obtained pursuant to the requirements under the GDPR.
This 50 million euro fine is the largest to be issued not only under the GDPR, but by any European regulator.
Read the complete article at Google First “Tech Giant” to be Fined for Violating GDPR
Additional Reading
Source: ComplexDiscovery

























