GDPR financial penalties: €50m for Google in France

Perhaps the most commonplace GDPR soundbite concerns swingeing financial penalties: in the most serious cases, up to €20m or 4% of global annual turnover, whichever is the greater. We have now had our first flexing of that maximal muscle, in the form of the decision of the French supervisory authority, the CNIL, to impose a […]

Inconsequential data protection breaches: High Court blocks big-money action against Google

Popular impressions of data protection range from the tedious (“the GDPR forces me to get consent for everything”) to the apocalyptic (“if you breach the GDPR, you will automatically get multi-million pound fine”, etc.). A common apocalyptic theme is that contraventions affecting large numbers of individuals may well trigger financially ruinous group litigation. They might. […]

Manni From Heaven: The Right to Forget Google Spain

In amongst the unsolicited love letters, the pictures of rudely shaped vegetables and simple abuse from those who believe a section 14 FOIA response is a deliberate conspiracy against them, the Panopticon postbag occasionally receives a polite enquiry about why we have not passed comment upon some fascinating information law development. Such a point might be […]

Global privacy restraints – Google vs the CNIL

Google has today published an op-ed in which it makes clear its intention to appeal against the CNIL’s ruling that the so-called ‘right to be forgotten’ has global reach, requiring Google to deindex links not just within Europe but across the world – see here. This is an important step by Google and brings into […]

Google and the ordinary person’s right to be forgotten

The Guardian has reported today on data emerging from Google about how it has implemented the Google Spain ‘right to be forgotten’ principle over the past year or so: see this very interesting article by Julia Powles. While the data is rough-and-ready, it appears to indicate that the vast majority of RTBF requests actioned by Google […]