Slashdot Mirror


Google Fined $57 Million By French Data Privacy Body For Failing To Comply With EU's GDPR Regulations (venturebeat.com)

schwit1 shares a report from VentureBeat: Google has been hit by a $57 million fine by French data privacy body CNIL (National Data Protection Commission) for failure to comply with the EU's General Data Protection Regulation (GDPR) regulations. The CNIL said that it was fining Google for "lack of transparency, inadequate information and lack of valid consent regarding the ads personalization," according to a press release issued by the organization. The news was first reported by the AFP. What the CNIL is effectively referencing here is dark pattern design, which attempts to encourage users into accepting terms by guiding their choices through the design and layout of the interface. This is something that Facebook has often done too, as it has sought to garner user consent for new features or T&Cs.

It's worth noting here that Google has faced considerable pressure from the EU on a number of fronts over the way it carries out business. Back in July, it was hit with a record $5 billion fine in an Android antitrust case, though it is currently appealing that. A few months back, Google overhauled its Android business model in Europe, electing to charge Android device makers a licensing fee to preinstall its apps in Europe. Google hasn't confirmed what its next steps will be, but it will likely appeal the decision as it has done with other fines. "People expect high standards of transparency and control from us," a Google spokesperson told VentureBeat. "We're deeply committed to meeting those expectations and the consent requirements of the GDPR. We're studying the decision to determine our next steps."

1 of 109 comments (clear)

  1. Re: Speeding fine by Mr.+Dollar+Ton · · Score: 5, Insightful

    GDPR's sole reason to exist is to give me a legal option to force the likes of Facebook and Google to store and process my private information in a more responsible manner.

    It is not difficult to comply with. A Mom and Pop shop does't need "a full time DPO" if they have a visitor from the EU or ship a package occasionally.

    I looked at europa.eu, and I don't understand what you mean at all by "cleaning house domestically". The GDPR applies with the same strength everywhere in the EU, and to all companies that operate there. I've had personal data removed by EU companies after a GDPR request.

    Take a breather, nobody's buying your sad FUD.