0370 270 6000

already registered?

Please sign in with your existing account details.

need to register?

Register to access exclusive content, sign up to receive our updates and personalise your experience on brownejacobson.com.

Privacy statement - Terms and conditions

Forgotten your password?

Google penalised €50m for GDPR breach

24 January 2019

Google’s €50m penalty

The first major financial penalty of €50m (£44m) has been imposed on Google LLC (EU HQ in Ireland) by CNIL, the French data regulator.

CNIL found that Google failed to provide users with adequate transparency information and secure valid user consent. Users could not easily access information about Google’s processing activities and detail regarding retention periods was lacking. It followed that the ‘consent’ relied upon was not informed.

Google informed users that their data was processed for ad personalisation, but this information did not encompass the plurality of websites, systems and apps involved in the processing (Google search, You Tube, Google Home, Google Maps, Playstore, Google Pictures). CNIL confirmed that Google’s description was too generic and vague in manner; a ‘one size all’ approach is not suitable for multiple uses.

What does this mean for you?

You must be transparent about how personal data is used. If you use cookies to track customers on your website or social media site, ensure you have specific and informed consent. Be clear about all your processing activities in one location - your accessible, up-to-date privacy notice. Review your policies regularly and update as necessary.

If you need help to ensure you are GDPR compliant, please do get in touch.

Related opinions

Flexible working, childcare and indirect sex discrimination – important reminder

The courts have long recognised that, on a societal level, women bear a greater burden of childcare responsibilities than men which can make it more difficult for women to comply with employer requirements for flexible working (known as the ‘childcare disparity’).

View blog


The new Part A1 moratorium was introduced partly in response to the Covid-19 pandemic and its impact on businesses. The moratorium is not intended to be used to simply delay the inevitable insolvency of a company, but rather to allow breathing space for that company to restructure and/or achieve an effective rescue.

View blog

Equal pay at ASDA stores - appeal to the Supreme Court unsuccessful

35,000 workers working in ASDA’s retail business sought to compare themselves to workers at distribution depots for equal pay purposes. Find out more about this Employment Appeal Tribunal.

View blog

Covid-19 insolvency measures extension

From 26 March 2021 the Corporate Insolvency and Governance Act 2020 (Coronavirus) (Extension of the Relevant Period) Regulations 2021 will come into force with the effect of extending several of the temporary measures brought in by the Corporate Insolvency and Governance Act 2020 (CIGA).

View blog

Mailing list sign up

Select which mailings you would like to receive from us.

Sign up