The Google logo at the Dmexco digital marketing conference in Cologne, Germany. (Krisztian Bocsi / Bloomberg News)

The Google logo at the Dmexco digital marketing conference in Cologne, Germany. (Krisztian Bocsi / Bloomberg News)

France fines Google $57M for first major privacy violation

Google allegedly failed to fully disclose how personal information is collected and used.

  • Tony Romm The Washington Post
  • Monday, January 21, 2019 3:08pm
  • Business

By Tony Romm / The Washington Post

Google has been fined nearly $57 million by French regulators for violating Europe’s tough new data-privacy rules, marking the first major penalty brought against a U.S. technology giant since the regionwide regulations took effect last year.

France’s top data-privacy agency, known as the CNIL, said Monday that Google failed to fully disclose to users how their personal information is collected and what happens to it. Google also did not properly obtain users’ consent for the purpose of showing them personalized ads, the watchdog agency said.

To French regulators, Google’s business practices ran afoul of Europe’s new General Data Protection Regulation. Implemented in 2018, the sweeping privacy rules, commonly referred to as GDPR, have set a global standard that has forced Google and its tech peers in Silicon Valley to rethink their data-collection practices or risk sky-high fines.

The United States lacks a similar, overarching federal consumer privacy law, a deficiency in the eyes of privacy rights advocates that has elevated Europe as the world’s de facto privacy cop.

Despite Google’s recent changes to comply with the E.U. rules, the CNIL said in a statement that “the infringements observed deprive the users of essential guarantees regarding processing operations that can reveal important parts of their private life since they are based on a huge amount of data, a wide variety of services and almost unlimited possible combinations.”

In response, Google said it is “studying the decision to determine our next steps,” adding: “People expect high standards of transparency and control from us. We’re deeply committed to meeting those expectations and the consent requirements of the GDPR.”

French regulators began investigating Google on May 25 – the day GDPR went into effect – in response to concerns raised by two groups of privacy activists. They filed additional privacy complaints against Facebook and its subsidiaries, photo-sharing app Instagram and messenger service WhatsApp, in other EU countries.

“We are very pleased that for the first time a European data protection authority is using the possibilities of GDPR to punish clear violations of the law,” said Max Schrems, the leader of the nonprofit noyb.eu (None of Your Business). “It is important that the authorities make it clear that simply claiming to be complaint is not enough.”

The French fine could presage even tougher scrutiny of Google and the rest of Silicon Valley in Europe, which already has demonstrated its willingness to punish U.S.-based tech companies for their missteps. In recent years, E.U. officials have penalized Apple for its tax practices, probed Facebook for multiple privacy scandals and slapped Google with a record-breaking fine on charges it sought to undermine its corporate rivals.

U.S. consumer advocates on Monday strongly encouraged Washington to follow Europe’s lead. “The big question now is why the Federal Trade Commission failed to act against the tech firms over these many years,” said Marc Rotenberg, the executive director of the Electronic Privacy Information Center. The FTC is Washington’s top privacy and security watchdog.

Under the E.U’s data privacy law, tech giants including Google must give users a full, clear picture of the data they collect, along with simple, specific tools for users to consent to having their personal information harnessed. In both cases, France said that Google had erred. Full details about what Google does with users’ personal information are “excessively disseminated across several documents,” according to the CNIL. The lack of transparency is even more jarring to users, the watchdog said, because of the sheer volume of services Google operates – including its maps service, YouTube and its app store.

Even though Google users can modify their privacy settings when they create an account, French regulators said it still isn’t enough – partly because the default setting is for Google to display personalized ads to users. Meanwhile, Google requires people who sign up to agree to its terms and conditions in full to create their accounts, a form of consent that the CNIL faulted because it requires users to agree to everything – or not use the service at all.

Some consumer advocates still bristled that France had not gone far enough. La Quadrature du Net, one of the groups that filed the complaint against Google, lamented it is “very low in comparison to Google’s annual turnover.”

While the group said it appreciated the initial move to fine Google, they felt that the French regulators had focused only on a small portion of the tech company’s alleged violations. They said they hoped that the enforcement agency would respond soon to the rest of their complaint, and they noted that the maximum possible fine is more than $4.7 billion.

Estelle Massé, a data protection expert at the advocacy group Access Now, described the French ruling as “the first big signal” about Europe’s willingness to enforce GDPR. Other companies, she said, had engaged in practices similar to Google, raising the possibility that additional U.S. tech giants could face fines of their own.

“Google is not the only one doing this,” Massé said. “This is significant for Google as a company but also for other actors.”

The Washington Post’s Quentin Ariès contributed to this report from Brussels.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Business

Black Press Media operates Sound Publishing, the largest community news organization in Washington State with dailies and community news outlets in Alaska.
Black Press Media concludes transition of ownership

Black Press Media, which operates Sound Publishing, completed its sale Monday (March 25), following the formerly announced corporate restructuring.

Maygen Hetherington, executive director of the Historic Downtown Snohomish Association, laughs during an interview in her office on Thursday, Feb. 15, 2024, in Snohomish, Washington. (Ryan Berry / The Herald)
Maygen Hetherington: tireless advocate for the city of Snohomish

Historic Downtown Snohomish Association receives the Opportunity Lives Here award from Economic Alliance.

FILE - Washington Secretary of State Steve Hobbs poses in front of photos of the 15 people who previously held the office on Nov. 22, 2021, after he was sworn in at the Capitol in Olympia, Wash. Hobbs faces several challengers as he runs for election to the office he was appointed to last fall. (AP Photo/Ted S. Warren, File)
Secretary of State Steve Hobbs: ‘I wanted to serve my country’

Hobbs, a former Lake Stevens senator, is the recipient of the Henry M. Jackson Award from Economic Alliance Snohomish County.

Mark Duffy poses for a photo in his office at the Mountain Pacific Bank headquarters on Wednesday, Feb. 14, 2024 in Everett, Washington. (Annie Barker / The Herald)
Mark Duffy: Building a hometown bank; giving kids an opportunity

Mountain Pacific Bank’s founder is the recipient of the Fluke Award from Economic Alliance Snohomish County.

Barb Tolbert poses for a photo at Silver Scoop Ice Cream on Thursday, Feb. 29, 2024 in Arlington, Washington. (Annie Barker / The Herald)
Barb Tolbert: Former mayor piloted Arlington out of economic brink

Tolbert won the Elson S. Floyd Award, honoring a leader who has “created lasting opportunities” for the underserved.

Photo provided by 
Economic Alliance
Economic Alliance presented one of the Washington Rising Stem Awards to Katie Larios, a senior at Mountlake Terrace High School.
Mountlake Terrace High School senior wins state STEM award

Katie Larios was honored at an Economic Alliance gathering: “A champion for other young women of color in STEM.”

The Westwood Rainier is one of the seven ships in the Westwood line. The ships serve ports in the Pacific Northwest and Northeast Asia. (Photo provided by Swire Shipping)
Westwood Shipping Lines, an Everett mainstay, has new name

The four green-hulled Westwood vessels will keep their names, but the ships will display the Swire Shipping flag.

A Keyport ship docked at Lake Union in Seattle in June 2018. The ship spends most of the year in Alaska harvesting Golden King crab in the Bering Sea. During the summer it ties up for maintenance and repairs at Lake Union. (Keyport LLC)
In crabbers’ turbulent moment, Edmonds seafood processor ‘saved our season’

When a processing plant in Alaska closed, Edmonds-based business Keyport stepped up to solve a “no-win situation.”

Angela Harris, Executive Director of the Port of Edmonds, stands at the port’s marina on Wednesday, Jan. 24, 2024, in Edmonds, Washington. (Ryan Berry / The Herald)
Leadership, love for the Port of Edmonds got exec the job

Shoring up an aging seawall is the first order of business for Angela Harris, the first woman to lead the Edmonds port.

The Cascade Warbirds fly over Naval Station Everett. (Sue Misao / The Herald file)
Bothell High School senior awarded $2,500 to keep on flying

Cascade Warbirds scholarship helps students 16-21 continue flight training and earn a private pilot’s certificate.

Rachel Gardner, the owner of Musicology Co., a new music boutique record store on Thursday, Jan. 18, 2024 in Edmonds, Washington. Musicology Co. will open in February, selling used and new vinyl, CDs and other music-related merchandise. (Olivia Vanni / The Herald)
New Edmonds record shop intends to be a ‘destination for every musician’

Rachel Gardner opened Musicology Co. this month, filling a record store gap in Edmonds.

MyMyToyStore.com owner Tom Harrison at his brick and mortar storefront on Tuesday, Sept. 6, 2022 in Everett, Washington. (Olivia Vanni / The Herald)
Burst pipe permanently closes downtown Everett toy store

After a pipe flooded the store, MyMyToystore in downtown Everett closed. Owner Tom Harrison is already on to his next venture.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.