{"id":4208,"date":"2019-01-22T11:25:10","date_gmt":"2019-01-22T15:25:10","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4208"},"modified":"2019-01-22T11:25:10","modified_gmt":"2019-01-22T15:25:10","slug":"57-million-what-the-cnil-gdpr-fine-of-google-means-for-you","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/","title":{"rendered":"$57 Million: What The CNIL GDPR Fine of Google Means for You"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-2174\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg\" alt=\"$57 Million: What The CNIL GDPR Fine of Google Means for You\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Yesterday French data regulator CNIL fined technology and search engine giant Google the equivalent of $57 million; Google allegedly breached the EU\u2019s <span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/solutionsreview.com\/identity-management\/gdpr-new-license-to-operate-morten-boel-sigurdsson-omada\/\" target=\"_blank\" rel=\"noopener\">GDPR<\/a><\/span> privacy regulation. The fine represents the largest GDPR penalty yet decided since the law came into effect in May of last year. <\/span><\/p>\n<p style=\"text-align: justify\"><div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/identity-and-access-management-vendor-map-of-the-best-solutions\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"IAM VendorMap\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/02\/IM_VM_SB_800.jpg\" alt=\"Download Link to IAM Vendor Map\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The fine punishes Google for &#8220;lack of transparency, inadequate information and lack of valid consent regarding ads personalization.&#8221; <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">CNIL explained their decision in more detail: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">According to the decision, &#8220;users are not able to fully understand the extent of the processing operations carried out by Google.&#8221; <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">&#8220;The information on processing operations for the ads personalization is diluted in several documents and does not enable the user to be aware of their extent.\u201d<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Creating a Google account mandates users consent to personalized ads without their full knowledge. \u201cThe GDPR provides that the consent is &#8216;specific&#8217; only if it is given distinctly for each purpose,&#8221; said CNIL. \u00a0<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In a statement, Google expressed their commitment to complying with GDPR mandates and to providing transparency in its data collection. However, they are currently studying the decision, most likely to determine whether it can file an appeal on an injunction. <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>What The CNIL Fine of Google Means for GDPR<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Even their appeal fails (should they file one), $57 million represents little more than a speed bump to Google; the world\u2019s most famous search engine made over $33 billion last quarter alone. Additionally, CNIL seemingly did not flex their full power on Google. <span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/solutionsreview.com\/identity-management\/numbers-gdpr-data-management\/\" target=\"_blank\" rel=\"noopener\">GDPR<\/a><\/span> allows for fines up to 4% of a company\u2019s annual global revenue for a penalty. In Google&#8217;s case, this would constitute far more than $57 million. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">However, the increasing size of GDPR fines indicates how serious the EU intends to take its new privacy regulation. Most likely, this represents only the beginning of GDPR showing its strength; the fine will increase and will only become steeper. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, enterprises need to wake up to the increasing privacy demands of their governments and carefully analyze what consumer data they collect. They also need to consider how their consent platforms work and if they are complying with the proper regulations in obtaining consent. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Furthermore, enterprises must also recognize GDPR and other privacy regulations do not just come from the top down. After all, even without the regulatory headaches, a data breach can cause a severe drop in customer trust and in long-term revenue.<\/span><span style=\"font-weight: 400\">\u00a0A $57 million fine may only be a hiccup for Google, but it can shutter other enterprises in an instant. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">To gain a little more perspective, we sought the counsel of some cybersecurity experts. Here\u2019s what they told us. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Anurag Kahol, CTO and Co-Founder,<\/b><span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/www.bitglass.com\/\" target=\"_blank\" rel=\"noopener\"> <b>Bitglass<\/b><\/a><\/span><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cGoogle being fined for its noncompliance with GDPR will likely pave the way for penalties for other prolific companies that have not yet met the demands of the new law. Until this point, data protection authorities have been incredibly patient with companies \u2013 GDPR has been in full effect for nearly a year now.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cHowever, it seems this grace period is more or less passing. While Google may be able to absorb this financial penalty, other companies are likely not large or successful enough to do so. This instance should be a wakeup call for organizations everywhere to begin taking data privacy far more seriously.\u201d<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Jonathan Bensen, Interim CISO,<\/b><span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/www.balbix.com\/\" target=\"_blank\" rel=\"noopener\"> <b>Balbix<\/b><\/a><\/span><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cCNIL\u2019s decision to fine Google does not seem to be aimed towards solving the issue, but towards making money. Most people should be aware that if they want enhanced digital services, they must pay the price of giving some reasonable amount of privacy away.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cIf CNIL wanted to take a step in the right direction, they should suggest Google change the language in its Terms of Service versus imposing a fine without offering a solution. While it is possible to run an Android phone without a Google account, it makes it almost unusable. The same argument can be made about iPhones and needing an account with Apple. You can run the phone without one, but it severely limits the capabilities of the device.\u201d<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>David Ginsburg, Vice President of Marketing, <\/b><span style=\"color: #0000ff\"><a style=\"color: #0000ff\" href=\"https:\/\/www.cavirin.com\/\" target=\"_blank\" rel=\"noopener\"><b>Cavirin<\/b><\/a><\/span><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cIf anyone had doubts about GDPR having \u2018teeth\u2019 and applying to US-based organizations, they can be put firmly to rest. Lack of transparency and misuse of data, only now receiving scrutiny in the US, is not an acceptable business practices in many other regions. I suspect Google will be only the first of many internet properties fined within the EU.\u201d<\/span><\/p>\n<h5 style=\"text-align: justify\"><b>Thank you to these cybersecurity experts for their time and expertise!<\/b><\/h5>\n<p style=\"text-align: justify\"><br \/>Widget not in any sidebars<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yesterday French data regulator CNIL fined technology and search engine giant Google the equivalent of $57 million; Google allegedly breached the EU\u2019s GDPR privacy regulation. The fine represents the largest GDPR penalty yet decided since the law came into effect in May of last year. The fine punishes Google for &#8220;lack of transparency, inadequate information [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,987,56,995,994,92,16,112,592,81,76,70,30],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>$57 Million: What The CNIL GDPR Fine of Google Means for You<\/title>\n<meta name=\"description\" content=\"French data regulator CNIL fined Google the equivalent of $57 million; Google allegedly breached the EU\u2019s GDPR privacy regulation. What it means for you:\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/\",\"name\":\"$57 Million: What The CNIL GDPR Fine of Google Means for You\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg\",\"datePublished\":\"2019-01-22T15:25:10+00:00\",\"dateModified\":\"2019-01-22T15:25:10+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"French data regulator CNIL fined Google the equivalent of $57 million; Google allegedly breached the EU\u2019s GDPR privacy regulation. What it means for you:\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"$57 Million: What The CNIL GDPR Fine of Google Means for You\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"$57 Million: What The CNIL GDPR Fine of Google Means for You\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"$57 Million: What The CNIL GDPR Fine of Google Means for You","description":"French data regulator CNIL fined Google the equivalent of $57 million; Google allegedly breached the EU\u2019s GDPR privacy regulation. What it means for you:","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/","url":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/","name":"$57 Million: What The CNIL GDPR Fine of Google Means for You","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg","datePublished":"2019-01-22T15:25:10+00:00","dateModified":"2019-01-22T15:25:10+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"French data regulator CNIL fined Google the equivalent of $57 million; Google allegedly breached the EU\u2019s GDPR privacy regulation. What it means for you:","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/01\/GDPR-mod.jpg","width":800,"height":400,"caption":"$57 Million: What The CNIL GDPR Fine of Google Means for You"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/57-million-what-the-cnil-gdpr-fine-of-google-means-for-you\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"$57 Million: What The CNIL GDPR Fine of Google Means for You"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4208"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4208"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4208\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2174"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}