The formation of the CNIL pronounced a penalty of €150 000 against GOOGLE Inc.. January 08, 2014 3 January 2014, the formation of the CNIL gave a penalty of 150 000 euros against GOOGLE Inc., arguing that confidentiality rules implemented by the Commission since March 1, 2012 are not in accordance with the law «informatique et Libertés» It ordered Google to proceed with the publication of a notice concerning this decision on the homepage of Google, within eight days from the notification of the decision. March 1, 2012, Google has decided to merge into a single policy different confidentiality rules applicable to some 60 of its services, including YouTube, Gmail, Picasa, Google Drive, Google Docs, Google Search, Google Maps, etc. Because of the number of the services in question, almost all french Internet users are affected by this decision. The G29, group of the European CNIL, then conducted an analysis of this privacy policy, concluding that it was not in conformity with the European legal framework, and issued several recommendations. Google Inc. is giving away effective in these, six European authorities commenced against her repressive procedures, each as regards the. In this context, 3 January 2014, the formation of the CNIL against GOOGLE Inc. pronounced a penalty of EUR 150 000, believing that it did not meet several provisions of the law informatique et Libertés. In its decision, the restricted training considers that data relating to users of Google in Frances service and processed by the company, are the personal data. It holds also French law contrary to Google Inc., that applies to treatment, by the personal data of Internet users residing in France. On the merits, the restricted training does not dispute the legitimacy of the objective of simplification pursued by the company by merging its privacy policies. However, it considers that the implementation of this unique policy conditions are contrary to the requirements of the Act: society does not sufficiently inform its users of the conditions and purposes of processing of their personal data. Thus, they cannot understand, or the purpose of the collection, they are not determined as required by the Act, or of the extent of the data collected through the different services. Therefore, they are not put able to exercise their rights, including access, opposition or cancellation. The company does not respect the obligations entrusted to him to obtain the consent of users prior to the deposit of cookies on their terminals. It does not storage for the entire time set data that it processes. She allows Finally, without any legal basis, to carry out the combination of completeness of the data it collects about users across all of its services. These findings are similar to those previously used by the authorities Dutch and Spanish protection of data in November and December, 2013, under their respective national legislation. The decisive penalty is the highest amount given so far by the limited training. It is justified by the number and the seriousness of the deficiencies. On the other hand, the restricted training ordered Google Inc. to proceed with the publication of a notice concerning this decision on the site https://Google/, 48 hours, within eight days from the notification of the decision. This measure of advertising is explained by the extent of the data collected as well as the need to inform the persons concerned, who are not able to exercise their rights.
Posted on: Sat, 08 Feb 2014 00:47:53 +0000