In a first, France’s data protection agency, National Data Protection Commission (CNIL) has fined $57 Mn on Google under EU’s General Data Protection Regulation (GDPR), for lack of transparency, inadequate information and lack of valid consent regarding the ads personalization.

The complaints had alleged Google of securing “forced consent” through pop-up boxes online or on its apps which imply that its services will be unavailable unless users accept its conditions of use.

CNIL observed that:

• Essential information like data processing purposes, data storage periods, etc. used for ads personalization are excessively disseminated  across several documents
• Relevant information is accessible after several steps only, implying sometimes up to 5-6 actions
• Users unable to fully understand the processing operations
• User consent on recording data for ad personalization is invalidly obtained and do not enable to get a clear picture
• Consent is neither “specific” nor “unambiguous”

 For more: https://www.cnil.fr/en/cnils-restricted-committee-imposes-financial-penalty-50-million-euros-against-google-llc