The Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority (DPA), has levied a €50 million fine against Google for allegedly violating the GDPR’s transparency, information, and consent requirements in deploying targeted advertisements. The fine—the largest fine under GDPR to date and the first involving a U.S. technology company—was issued on January 21, 2019, and sheds additional light on the CNIL’s GDPR enforcement priorities and practices.
Read our client alert.