.webp)
%20(1).jpg)
.webp)
.jpg)
.jpg)
Google fined €50m for breaching GDPR
Google fined €50 million by French data watchdog
Google has been fined 50 million euros by the French data watchdog, CNIL for breaches under the General Data Protection Regulation (GDPR).
Google intends to appeal the decision. The result of the appeal will impact how consent is interpreted under the GDPR and set a powerful precedent for the tech industry.CNIL found that Google lacked transparency on how user data was processed and stored. Information regarding data processing was not easily accessible: it was spread over different pages and documents. This effectively hid the extent of Google's data processing and the conditions surrounding the data.
This decision highlights the importance to New Zealand businesses that have data processing activities in the European Union of making sure they are complying with the GDPR. Otherwise, large companies can face maximum fines of 4% of their annual global turnover (meaning for Google, it could have been almost $4bn) or $20m, whichever is higher.
Google also failed to satisfy the GDPR's requirement of consent being 'specific' and 'unambiguous'. Under the GDPR, consent must be obtained for each purpose the data will be used for, e.g. personalisation of ads or speech recognition.
Instead, consent was obtained from users being asked to agree to Google's terms and privacy policy, rather than specifically asking users to 'opt in' for each use of their data.Because Google's main source of revenue is from ad personalisation, the CNIL saw this as a serious violation. The fine also reflected the continuous and still occurring violations by Google under the GDPR.
The enforcement action taken by the French regulator follows a global trend of increasing scrutiny of companies that derive significant value out of personal information. New Zealand businesses should also take on board that obtaining a general consent to use customer data is no longer good enough - consent must be specific and the processing of data must be legitimate. New Zealand businesses that deal with EU citizens' data are still captured by the GDPR.
Services in this insight
Not fooling around – "The Meme Bill" approaches second reading, but how will it actually work here?
"Now is the time to act" – Reserve Bank seeks feedback on modernising New Zealand’s retail payment system
Global AI shut down – What the United States export controls on AI mean for New Zealand businesses
Fair Trading Act reform – More agile product safety standards
Fair Trading Act reform – New "safe harbour" for suspected scam activity
Fair Trading Act reform – Changes will increase governance risk for business
New Zealand’s online gambling laws get a shake up
Consultation opens on New Zealand's payment services regulation
Modern slavery regulation on the way – Is your business ready?
From Hertzian waves to hyperlinks – What the BSA’s online decision means for your business
Space Law in New Zealand — Signals from the ground
Cyber security changes flagged for New Zealand
The four Cs of successful fintech partnerships
New rule 3A introduced to the Biometric Processing Privacy Code
IPP3A is nearly in force – What agencies need to know
OPC shifts public enquiries online – What agencies should do now
AI as a confidante? Legal privilege and the ever-increasing use of AI
New Therapeutic and Health Advertising Code – What you need to know
Building blocks of trade mark law: New Zealand approach to "use as a trade mark" now compatible with Australia
Consumer law update 2025
Open banking launches in New Zealand
Is fair something to fear? The Government announces beefed-up Fair Trading Act
Is it fair? Lessons from Bartz v Anthropic and Kadrey v Meta
Open banking almost live
Why New Zealand businesses should care about the EU Data Act
Product labelling changes flagged for New Zealand
Biometric Processing Privacy Code 2025 introduced to New Zealand
Open banking regulations released for consultation
Ten tips for buy-side M&A success
A recipe for disaster – Is caramel a copyright work?
Becoming a Globally Renowned Fintech Nation (and how regulation can light the path)
Important changes made to the Privacy Act
New Zealand may ban social media for young users
Customer and Product Data Act update – Open banking officially on the way
Tips from the trenches – Your AI policy cheat sheet
Significant regulatory reform proposed for New Zealand media
Security guidance released for emerging tech companies
Customer and Product Data Bill – Select Committee reports back
Consumer law update 2024
New Zealand’s Artist Resale Royalty is ready to go
The shape of coffee – “Moccona” vs “Vittoria”
New Zealand’s Copyright Act gets a sense of humour
WIPO’s traditional knowledge treaty is adopted
Doing business in the Middle East
AI and advertising – What producers need to know
Seven contract clauses every freelancer needs
Baby Reindeer – When truth is stranger than fiction?
Our comments on the Biometric Processing Privacy Code
Therapeutic Products Act to be repealed this year
Is End-to-End to end?
Geographical indications – Changes uncorked by the EU-NZ Fair Trade Agreement
Lawyers and Generative AI – New NZ Law Society guidance released
Facing the future – A biometrics code of practice for New Zealand?
Deepfakes and style mimicking – Should New Zealand adopt a right of publicity?
Five Eyes release the Five Principles to Secure Innovation
The copyright conundrum with generative AI
Innovate at the speed of trust – Privacy Commissioner releases new guidance on artificial intelligence tools
Political advertising on social media: sludge or copyright quagmire?
Privacy Amendment Bill introduced to Parliament
New Data Privacy Framework: Meta gets a lifeline
The long and winding road to royalties
Implications of the Supreme Court’s “new debt” approach in Mainzeal
EU gets closer to AI laws
UK Supreme Court puts Quincecare ‘duty’ back in its box
A Deep Dive into The Customer and Product Data Bill
Searching for a shield: Meta’s €1.2 billion fine and international transfers in the age of Big Data
New NZ-UK Free Trade Agreement signals tech, media and IP law changes
Ditch the fax! Tips for building a tech-savvy law firm
The Incorporated Societies Act 2022 – what you need to know for your society
Common myths about copyright online
Artificial artist, or artificial plagiarist?
Big boost to gaming
Is your product “AI powered”?
The latest on New Zealand’s Consumer Data Right
Space Law in New Zealand
You Cannot Defame the Dead or Can You? Tikanga Māori and NZ Defamation Law
Open Banking is coming – through the Consumer Data Right
Massive SEC Fines for Companies Using Text and Instant Messaging
One Act to Rule Them All
A Legal Guide to Kicking SaaS
Potential changes to the Privacy Act 2020
NZ's Social Media "Code of Practice" Launched
Are you being unfair?
Are you legal?
Power Up 2022
A new Companies Office levy is one step closer
Has Paramount Pictures gone maverick?
From Russia with love: The ‘other’ Russian conflict targeting intellectual property owners
I'm back, baby
Retail Payment System Act 2022 now in force
Paying the price for getting privacy wrong
Can AI be an inventor?
Finfluencer Crackdown
TIN Fintech Insights Report Launch
Britain seeks to regulate 'Big Tech'
Disclosure of personal information - how to, not don't do
The Spice May Flow, But The Copyright Doesn’t
Sound Recording Ownership (Taylor's Version)
The Lowdown (and Lockdown) on Summer Clerkships
Building Blocks of Trust
Other articles you
might like
The Reserve Bank is seeking views on foundational reforms to overhaul New Zealand’s retail payment system.
.webp)
US export controls can abruptly cut off frontier AI access, creating material risks for New Zealand businesses.
.webp)
New Zealand is consulting on reforms to its payment services regulatory framework, with submissions closing 3 July 2026.