PARIS (AP) – France’s highest administrative court has upheld a fine of 50 million euros ($56 million) Google was ordered to pay for not being â€œsufficiently clear and transparentâ€ with Android users about their data protection options.
Google was first slapped with the fine in January 2019, the first penalty for a U.S. tech giant under new European data privacy rules that took effect in 2018.
Google appealed the penalty issued by the French data privacy watchdog to the Council of State, France’s final arbiter in such cases.
The council ruled Friday that the National Data Protection Commission had the right to sanction Google and that the fine was not disproportionate, â€œgiven the particular seriousness” and duration of Google’s failings.
In response, Google said it would look at making changes.
In force since May 2018, the European Unionâ€™s General Data Protection Regulation, or GDPR, is aimed at clarifying individual rights to personal data collected by companies. It requires companies to use plain language to explain what theyâ€™re doing with data.
In sanctioning Google, Franceâ€™s data watchdog had said Google users were â€œnot sufficiently informedâ€ about what they were agreeing to as the company collected data for targeted advertisements.
It faulted Google for making users take too many steps, â€œsometimes up to 5 or 6 actions,â€ to find out how and why their data is being used and for being â€œtoo generic and vagueâ€ in descriptions of why data is processed.
The Council of State concurred and faulted Google for “particularly intrusiveâ€ data collection methods.
It said the firm â€œhas not provided sufficiently clear and transparent information to users of the Android operating system and has not enabled them to give free and informed consent to the processing of their personal data for the purpose of personalizing advertisements.â€
Google said Friday that it has â€œinvested in industry-leading toolsâ€ to help its users â€œunderstand and control how their data is used.â€
â€œThis case was not about whether consent is needed for personalized advertising, but about how exactly it should be obtained,â€ the company said. “In light of this decision, we will now review what changes we need to make.â€