Google failed to inform its users adequately about purposes and recipients
Transfer of data outside of the EU: "numerous countries" not sufficient
Right of access, rectification and deletion: a right not a courtesy
Cookies: not too many hyperlinks before getting to the information
The Practical Effect of Paris Court's Decision
One might take the view that the decision will have limited impact since Google announced last year that it would sunset the consumer version of its social media network effective on April 2, 2019. However, the impact of this decision is potentially much broader, because these clauses do not apply to Google+ only, they are also part of the common terms and policies which govern Google services generally. UFC QueChoisir announced after this decision that "considering this decision and the fine ordered by the French Data Protection Authority on January 21st, 2019 [50 million fine under the GDPR], they now intend to seek a meaningful remedy for each individual consumer, in addition to the 30,000 euros damages awarded by the court for the damage caused to the collective interests of consumers". It looks like Google is not out of the French woods. European woods are currently not very welcoming either: on the basis of antitrust legislation, the European Commission just fined Google €1.49 billion for abusive practices in online advertising.
To view Foley Hoag's Security, Privacy and The Law Blog please click here
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.