€50M fine for Google

Published On:Monday, January 21, 2019

The French data protection authority (CNIL) has given Google a €50M fine for "lack of transparency, inadequate information and lack of valid consent regarding ads personalisation". This is the first major fine levied by the CNIL under the GDPR.

Amongst other things, this included the use of a generalised statement “I agree to the processing of my information as described above and further explained in the Privacy Policy” which does not amount to fully informed and unambiguous consent to processing.  In addition, contrary to the requirements of the GDPR, a box confirming agreement was used which by default was pre-ticked.

The fine can be appealed.