The French supreme court (Conseil d’Etat) has dismissed a challenge by Google against the EUR 50 million fine imposed on the company in January 2019 for GDPR violations.
The ruling confirms the conclusions of the country’s data protection watchdog Cnil, which had found Google guilty of failing to provide adequate information on its data consent policies when signing up Android users, telecompaper reports.
The apex court also dismissed the argument that Cnil’s Irish counterpart had sole jurisdiction over the original case. This is because, at the time of the sanction, Google’s Irish operations were not involved in the confidentiality rules imposed on users configuring a new Android smartphone.
Additionally, the court upheld the amount of the fine, stating that it was not disproportionate given the seriousness of Google’s failings, the judges ruled.
So far the sanction remains the highest ever surcharged by any data protection watchdog in Europe.