← Back to cases
Case LawSupreme Court
CNIL v. Google (€50M GDPR Fine)
N/SAN-2019-001
Data PrivacyAI Regulation
Jurisdiction
France
Date
Jun 19, 2020
Status
Appeal Decided
Source
curia
Court
Conseil d'État (French Supreme Administrative Court)
Date Filed
Jan 21, 2019
Date Decided
Jun 19, 2020
Relevance
90%
Summary
First major GDPR fine upheld on appeal. Established that buried consent mechanisms violate GDPR.
Holding
France's highest administrative court upheld the €50M fine against Google for lack of transparency and valid consent in ad personalization. Confirmed that buried consent mechanisms and pre-checked boxes violate GDPR.
Key Facts
Google's consent process for personalized ads lacked transparency: consent was pre-checked, information was spread across multiple pages.
Status Timeline
Ruling IssuedCNIL imposed €50M fine
Appeal DecidedConseil d'État upheld fine