The French government agency CNIL explained that Google had violated two provisions of the law: first by not making its data-collection policies easily accessible enough and second by not obtaining sufficient and specific user consent for ad personalization across each of Google’s numerous services, including YouTube, Google Maps and more. The CNIL then concluded that Google fails to comply with the GDPR when it comes to transparency and consent. When Google asks you if you want personalized ads, the company doesn’t tell you that it is talking about many different services, from YouTube to Google Maps and Google Photos, this isn’t just about your Android phone.
The two complaints were filed by the French digital advocacy group La Quadrature du Net and the group Noyb.eu, a watchdog organization. Noyb, an English acronym for “None of your business,” has also filed related complaints against Instagram, WhatsApp, and Facebook, which remain pending. For the instant Google had an answer by its spokesperson: “People expect high standards of transparency and control from us. We’re deeply committed to meeting those expectations and the consent requirements of the GDPR. We’re studying the decision to determine our next steps.”