Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Google LLC: Insufficient legal basis for data processing
How it connects
Related across sources
Guidance Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures News Irish Data Protection Commissioner Fines Instagram EUR 405M for Children Privacy Violations News Who Is Collecting Data from Your Car?Who Is Collecting Data from Your Car? News DeFine is a calculator for GDPR fines based on method of the EDPB Guidance Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679
Full text
The fine was imposed on the basis of complaints from the Austrian organisation 'None Of Your Business' and the French NGO 'La Quadrature du Net'. The complaints were filed on 25th and 28th of May 2018 - immediately after the GDPR became applicable. The complaints concerned the creation of a Google account during the configuration of a mobile phone using the Android operating system. The CNIL imposed a fine of 50 million euros for lack of transparency (Art. 5 GDPR), insufficient information (Art. 13 / 14 GDPR) and lack of legal basis (Art. 6 GDPR). The obtained consents had not been given 'specific' and not 'unambigous' (Art. 4 nr. 11 GDPR).
Industry: Media, Telecoms and Broadcasting
Original document at the source www.cnil.fr