GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Google Inc.

Country
France
Fine
50,000,000 EUR
Date
2019-01-21
Sector
Public Sector
Articles
Art. 13 GDPRArt. 14 GDPRArt. 6 GDPRArt. 5 GDPR

Lack of legal basis for data processing

Following complaints from the Austrian organisation "None Of Your Business" and the French NGO "La Quadrature du Net", a fine of 50 million euros was imposed. The complaints were filed on 25 and 28 May 2018, immediately after the entry into force of the GDPR. The complaints concerned the creation of a Google account when configuring a mobile phone with the Android operating system. Reasons for the high fine: lack of transparency (Art. 5 GDPR), insufficient information (Art. 13 / 14 GDPR) and lack of legal basis (Art. 6 GDPR). The consents obtained were not "specific" and not "unequivocal" (Art. 4 No. 11 GDPR). Authority: French Data Protection Authority (CNIL)