Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
CNIL's enforcement committee ruled Jan. 8 that the policy, which unifies data privacy conditions for some 60 Google services, violates France's 1978 data protection law, and it fined Google a record 150,000 euros ($203,888) (13 PVLR 99, 1/13/14).
CNIL also ordered Google to publish notice of the decision on the Google.fr home page within eight days of receiving the enforcement ruling.
Google Jan. 13 appealed to the Conseil d'État (13 PVLR 133, 1/20/14). It then asked the court to suspend the posting sanction pending the outcome of the underlying appeal.
Google failed to prove that publishing the notice before a final ruling on its appeal of the sanction would damage its reputation in France, the court said.
In a Feb. 7 statement, CNIL said Google now has 48 hours to publish the notice.
CNIL, and other European Union data protection authorities, have repeatedly warned Google about the unified policy that Google launched in March 2012 to track user information across its e-mail, social networking, YouTube, search engine and other services, as part of a plan to integrate its 60 privacy policies into one (11 PVLR 426, 3/5/12).
In November 2013 the Netherlands DPA ruled that Google's policy violates its data protection law (12 PVLR 2057, 12/9/13) but as of Feb. 7 hasn't levied a fine.
To contact the reporter on this story: Rick Mitchell in Paris at email@example.com
To contact the editor responsible for this story: Donald G. Aplin at firstname.lastname@example.org
The court's opinion is available, in French, at http://www.conseil-etat.fr/fr/selection-de-decisions-du-conseil-d-etat/ordonnance_du_7_fevrier_2014_societe_google_inc.html.
Notify me when updates are available (No standing order will be created).
Put me on standing order
Notify me when new releases are available (no standing order will be created)