Google LLC

€50,000,000

Insufficient legal basis for data processing

Datum för beslut

21 januari 2019

Myndighet

French Data Protection Authority (CNIL)

FR

Sektor

Media, Telecoms and Broadcasting

Land

FR

Lag

GDPR

Status

FINAL

Beskrivning

The fine was imposed on the basis of complaints from the Austrian organisation 'None Of Your Business' and the French NGO 'La Quadrature du Net'. The complaints were filed on 25th and 28th of May 2018 - immediately after the GDPR became applicable. The complaints concerned the creation of a Google account during the configuration of a mobile phone using the Android operating system. The CNIL imposed a fine of 50 million euros for lack of transparency (Art. 5 GDPR), insufficient information (Art. 13 / 14 GDPR) and lack of legal basis (Art. 6 GDPR). The obtained consents had not been given 'specific' and not 'unambigous' (Art. 4 nr. 11 GDPR).

Rättsliga hänvisningar

Art. 13Art. 14Art. 6Art. 5

Frågor och överträdelser

Insufficient legal basis for data processing

Håll dig uppdaterad om efterlevnaden av sekretessreglerna

Vi respekterar din integritet. Ett e-postmeddelande per månad, ingen skräppost, avsluta prenumerationen när som helst.