France Supreme Court dismisses Google’s EUR 50mln challenge on GDPR fine

The French supreme court (Conseil d’Etat) has dismissed a challenge by Google against the EUR 50 million fine imposed on the company in January 2019 for GDPR violations.

The ruling confirms the conclusions of the country’s data protection watchdog Cnil, which had found Google guilty of failing to provide adequate information on its data consent policies when signing up Android users, telecompaper reports.

The apex court also dismissed the argument that Cnil’s Irish counterpart had sole jurisdiction over the original case. This is because, at the time of the sanction, Google’s Irish operations were not involved in the confidentiality rules imposed on users configuring a new Android smartphone.

Additionally, the court upheld the amount of the fine, stating that it was not disproportionate given the seriousness of Google’s failings, the judges ruled.

So far the sanction remains the highest ever surcharged by any data protection watchdog in Europe.

What is GDPR, the EU’s new data protection law?
The General Data Protection Regulation (GDPR) is the toughest privacy and security law in the world. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU.

GHM News