Adam Rose, Data Protection Partner, has commented on the first major GDPR penalty, a fine of €50m imposed by the French data protection authority, the National Data Protection Commission (CNIL), against Google for lack of transparency, inadequate information and lack of valid consent regarding ad personalisation.
Among other comments, Adam said: "Google failed to give users of its services adequate information as to what it was doing with the personal data it was collecting. Article 13 of the GDPR is all about transparency, and the complaint made was that information was not easily accessible by users. The CNIL noted that while Google might have provided the necessary information to users, it did so in an opaque fashion."
To read the full article click here.
This article was first published on Lexis®PSL Information Law on 22 January 2019.