{"id":3355,"date":"2019-01-24T10:48:16","date_gmt":"2019-01-24T10:48:16","guid":{"rendered":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/blog\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/"},"modified":"2026-02-25T09:35:46","modified_gmt":"2026-02-25T09:35:46","slug":"the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2","status":"publish","type":"post","link":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/","title":{"rendered":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019"},"content":{"rendered":"\nAn interesting decision of the French Data Protection Authority (\u201c DPA\u201d) CNIL.( See CNIL.fr)\nThe French CNIL is de first supervisory authority imposing a huge penalty based on the GDPR! In the UBER case the Dutch DPA en the UK ICO based their penaltys still on the older national privacy legislation and those penaltys were much lower \u00a3385,000 in the UK and \u20ac600,000 in the Netherlands. That was about a data breach, which was kept secret for one year by Uber.<!--more-->\n\nOn 25 and 28 May 2018, the National Data Protection Commission (CNIL) received group complaints from the associations None Of Your Business (\u201cNOYB\u201d) and La Quadrature du Net (\u201cLQDN\u201d). LQDN was mandated by 10 000 people to refer the matter to the CNIL.\nThe associations reproach GOOGLE for not having a valid legal basis to process the personal data of the users of its services, particularly for ads personalization purposes.\n<h2>\u201cOne-stop-shop mechanism\u201d was not applicable<\/h2>\nThe GDPR (art. 55) establishes a \u201cone-stop-shop mechanism\u201d which provides that an organization set up in the European Union shall have only one interlocutor, which is the Data Protection Authority (\u201cDPA\u201d) of the country where its \u201cmain establishment\u201d is located. This authority serves as \u201clead authority\u201d. In the Uber case for example the Dutch DPA had the lead.\nIn this case, the discussions with the other authorities, in particular with the Irish DPA, where GOOGLE\u2019s European headquarters are situated, did not allow to consider that GOOGLE had a main establishment in the European Union. When the CNIL initiated proceedings, the Irish establishment did not have a decision-making power on the processing operations carried out in the context of the operating system Android and the services provided by GOOGLE LLC, in relation to the creation of an account during the configuration of a mobile phone.\nAs the \u201cone-stop-shop mechanism\u201d was not applicable, the CNIL was competent to take any decision regarding processing operations carried out by GOOGLE LLC, as were the other DPA\u2019s as well.\n<h2>Two types of breaches<\/h2>\nThe CNIL observed two types of breaches of the GDPR.\n<h3>A. Violation of the obligations of transparency and information<\/h3>\nThe information provided by GOOGLE is not easily <strong>accessible<\/strong> for users.\n\nThe relevant essential information is <strong>accessible after several steps only<\/strong>, implying sometimes up to <strong>5 or 6 actions<\/strong>.\n\nThe information is <strong>not always clear nor comprehensive<\/strong>.\n\nUsers are <strong>not able to fully understand the extent of the processing<\/strong> operations carried out by GOOGLE.\n\nThe purposes of processing are described in a too <strong>generic and vague manner<\/strong>, and so are the categories of data processed for these various purposes.\n\nThe information communicated is <strong>not clear enough<\/strong> so that the user can understand that the legal basis of processing operations for the ads personalization is the consent, and not the legitimate interest of the company.\n\nThe restricted committee notices that the <strong>information about the retention period is not provided<\/strong> for some data.\n<h3>B. Violation of the obligation to have a legal basis for ads personalization processing<\/h3>\nThe users\u2019 consent is not sufficiently informed.\n\nThe information on processing operations for the ads personalization is diluted in several documents and does not enable the user to be aware of their extent. For example, in the section \u201cAds Personalization\u201d, it is not possible to be aware of the plurality of services, websites and applications involved in these processing operations (Google search, You tube, Google home, Google maps, Playstore, Google pictures\u2026) and therefore of the amount of data processed and combined.\n\nThe collected consent is <strong>neither \u201cspecific\u201d nor \u201cunambiguous\u201d<\/strong>.\n\nWhen an account is created, the user can admittedly modify some options associated to the account by clicking on the button \u00ab More options \u00bb, accessible above the button \u00ab Create Account \u00bb. It is notably possible to configure the display of personalized ads. <strong>That does however not mean that the GDPR is respected<\/strong>.\n\nThe user not only has to click on the button \u201cMore options\u201d to access the configuration, but the display of <strong>the ads personalization is moreover pre-ticked<\/strong>. However, as provided by the GDPR, consent is <strong>\u201cunambiguous\u201d only with a clear affirmative action from the user (by ticking a non-pre-ticked box for instance)<\/strong>.\n\nBefore creating an account, the user is asked to tick the boxes \u00ab I agree to Google\u2019s Terms of Service\u00bb and \u00ab I agree to the processing of my information as described above and further explained in the Privacy Policy\u00bb in order to create the account. Therefore, the user gives his or her consent in full, for all the processing operations purposes carried out by GOOGLE based on this consent (ads personalization, speech recognition, etc.). However, the GDPR provides that the consent is<strong> \u201cspecific\u201d only if it is given distinctly for each purpose<\/strong>.\n<h2>The penalty imposed: why 50 million euros?<\/h2>\nThe penalty is justified by <strong>the severity of the infringements<\/strong> observed regarding the <strong>essential principles of the GDPR: transparency, information and consent<\/strong>.\n\n<strong>Despite the measures implemented by GOOGLE<\/strong> (documentation and configuration tools), the infringements observed <strong>deprive the users of essential guarantees<\/strong> regarding processing operations that can reveal important parts of their private life since they are based on a huge amount of data, a wide variety of services and almost unlimited possible combinations.\n\nThe users have to be enabled to control their data and therefore have <strong>to be sufficiently informed<\/strong> before giving consent.\n\nThe violations are<strong> continuous breaches of the Regulation<\/strong> as they are still observed up to now, It is not a one-off, time-limited, infringement.\n\n<strong>The important place that the operating system Android has on the French market<\/strong>, thousands of French people create, every day, a GOOGLE account when using their smartphone.\n\n<strong>The economic model of the company is partly based on the ads personalization<\/strong>. Therefore, it is of its utmost responsibility to comply with the obligations on the matter.\n\nA very clear and soon warning for he whole market I think. This is what could be expected taking the GDPR seriously, no warnings and in this case immediate penaltys. A serious impact for the business models of the Googles in this world.\n","protected":false},"excerpt":{"rendered":"<p>An interesting decision of the French Data Protection Authority (\u201c DPA\u201d) CNIL.( See CNIL.fr) The French CNIL is de first supervisory authority imposing a huge penalty based on the GDPR! In the UBER case the Dutch DPA en the UK ICO based their penaltys still on the older national privacy legislation and those penaltys were [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"single-post","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1097],"tags":[],"class_list":["post-3355","post","type-post","status-publish","format-standard","hentry","category-privacy"],"acf":[],"mb":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.4 (Yoast SEO v27.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019 - Cordemeyer &amp; Slager Advocaten<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019\" \/>\n<meta property=\"og:description\" content=\"An interesting decision of the French Data Protection Authority (\u201c DPA\u201d) CNIL.( See CNIL.fr) The French CNIL is de first supervisory authority imposing a huge penalty based on the GDPR! In the UBER case the Dutch DPA en the UK ICO based their penaltys still on the older national privacy legislation and those penaltys were [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Cordemeyer &amp; Slager Advocaten\" \/>\n<meta property=\"article:published_time\" content=\"2019-01-24T10:48:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-25T09:35:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cordemeyerslager-nl.bearwithus.nl\/\/app\/uploads\/2026\/01\/CordemeyerSlager-Advocaten-Vrouw-Met-bril-full.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1512\" \/>\n\t<meta property=\"og:image:height\" content=\"888\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Bob Cordemeyer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bob Cordemeyer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\/\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"Bob Cordemeyer\",\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/f6af4f8e5486cfb9423e7df41ea38f2d\"\n\t            },\n\t            \"headline\": \"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019\",\n\t            \"datePublished\": \"2019-01-24T10:48:16+00:00\",\n\t            \"dateModified\": \"2026-02-25T09:35:46+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\"\n\t            },\n\t            \"wordCount\": 1009,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization\"\n\t            },\n\t            \"articleSection\": [\n\t                \"Privacy\"\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\",\n\t            \"url\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\",\n\t            \"name\": \"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019 - Cordemeyer &amp; Slager Advocaten\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#website\"\n\t            },\n\t            \"datePublished\": \"2019-01-24T10:48:16+00:00\",\n\t            \"dateModified\": \"2026-02-25T09:35:46+00:00\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#website\",\n\t            \"url\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/\",\n\t            \"name\": \"Cordemeyer & Slager Advocaten\",\n\t            \"description\": \"Gespecialiseerd in IT recht &amp; ondernemingsrecht\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"LegalService\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization\",\n\t            \"name\": \"Cordemeyer & Slager Advocaten\",\n\t            \"alternateName\": \"Cordemeyer Slager\",\n\t            \"url\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/logo\/image\/\",\n\t                \"url\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/app\/uploads\/2026\/01\/CordeMeyerSlager-Advocaten-Favicon.png\",\n\t                \"contentUrl\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/app\/uploads\/2026\/01\/CordeMeyerSlager-Advocaten-Favicon.png\",\n\t                \"width\": 512,\n\t                \"height\": 512,\n\t                \"caption\": \"Cordemeyer & Slager Advocaten\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/logo\/image\/\"\n\t            },\n\t            \"description\": \"Cordemeyer & Slager Advocaten is een Nederlands advocatenkantoor dat zich profileert als een nichekantoor voor de IT-sector. Het kantoor is gevestigd in Amsterdam (voorheen Haarlem) en bestaat sinds 1985.\",\n\t            \"email\": \"info@cordemeyerslager.nl\",\n\t            \"telephone\": \"023 534 0100\",\n\t            \"legalName\": \"Cordemeyer & Slager\",\n\t            \"foundingDate\": \"1985-01-01\",\n\t            \"numberOfEmployees\": {\n\t                \"@type\": \"QuantitativeValue\",\n\t                \"minValue\": \"11\",\n\t                \"maxValue\": \"50\"\n\t            },\n\t            \"priceRange\": \"$$\"\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/f6af4f8e5486cfb9423e7df41ea38f2d\",\n\t            \"name\": \"Bob Cordemeyer\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/image\/\",\n\t                \"url\": \"https:\/\/secure.gravatar.com\/avatar\/cff785f0fc6f161b65db99a8510b24bdfaf5744a433f705f274dbbca3b32d45d?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\/\/secure.gravatar.com\/avatar\/cff785f0fc6f161b65db99a8510b24bdfaf5744a433f705f274dbbca3b32d45d?s=96&d=mm&r=g\",\n\t                \"caption\": \"Bob Cordemeyer\"\n\t            },\n\t            \"description\": \"Is voornamelijk werkzaam in de IT-rechtpraktijk. Doet veel (internationale) contractonderhandelingen aangaande distributieovereenkomsten, licentieovereenkomsten, outsourcing en gerechtelijke procedures waarbij auteursrecht, octrooirecht, merkenrecht en internetrecht essentialia zijn. Lees meer\",\n\t            \"sameAs\": [\n\t                \"https:\/\/www.cordemeyerslager.nl\/over-ons\/mr-b-a-m-cordemeyer\"\n\t            ],\n\t            \"url\": \"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/author\/bobcordemeyer\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019 - Cordemeyer &amp; Slager Advocaten","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019","og_description":"An interesting decision of the French Data Protection Authority (\u201c DPA\u201d) CNIL.( See CNIL.fr) The French CNIL is de first supervisory authority imposing a huge penalty based on the GDPR! In the UBER case the Dutch DPA en the UK ICO based their penaltys still on the older national privacy legislation and those penaltys were [&hellip;]","og_url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/","og_site_name":"Cordemeyer &amp; Slager Advocaten","article_published_time":"2019-01-24T10:48:16+00:00","article_modified_time":"2026-02-25T09:35:46+00:00","og_image":[{"width":1512,"height":888,"url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/\/app\/uploads\/2026\/01\/CordemeyerSlager-Advocaten-Vrouw-Met-bril-full.jpg","type":"image\/jpeg"}],"author":"Bob Cordemeyer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bob Cordemeyer","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#article","isPartOf":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/"},"author":{"name":"Bob Cordemeyer","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/f6af4f8e5486cfb9423e7df41ea38f2d"},"headline":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019","datePublished":"2019-01-24T10:48:16+00:00","dateModified":"2026-02-25T09:35:46+00:00","mainEntityOfPage":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/"},"wordCount":1009,"publisher":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization"},"articleSection":["Privacy"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/","url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/","name":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019 - Cordemeyer &amp; Slager Advocaten","isPartOf":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#website"},"datePublished":"2019-01-24T10:48:16+00:00","dateModified":"2026-02-25T09:35:46+00:00","breadcrumb":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/the-first-huge-gdpr-penalty-of-50-million-euros-for-google-imposed-by-french-dpa-cnil-on-january-21-2019-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/"},{"@type":"ListItem","position":2,"name":"The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019"}]},{"@type":"WebSite","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#website","url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/","name":"Cordemeyer & Slager Advocaten","description":"Gespecialiseerd in IT recht &amp; ondernemingsrecht","publisher":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"LegalService","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#organization","name":"Cordemeyer & Slager Advocaten","alternateName":"Cordemeyer Slager","url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/logo\/image\/","url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/app\/uploads\/2026\/01\/CordeMeyerSlager-Advocaten-Favicon.png","contentUrl":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/app\/uploads\/2026\/01\/CordeMeyerSlager-Advocaten-Favicon.png","width":512,"height":512,"caption":"Cordemeyer & Slager Advocaten"},"image":{"@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/logo\/image\/"},"description":"Cordemeyer & Slager Advocaten is een Nederlands advocatenkantoor dat zich profileert als een nichekantoor voor de IT-sector. Het kantoor is gevestigd in Amsterdam (voorheen Haarlem) en bestaat sinds 1985.","email":"info@cordemeyerslager.nl","telephone":"023 534 0100","legalName":"Cordemeyer & Slager","foundingDate":"1985-01-01","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"priceRange":"$$"},{"@type":"Person","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/f6af4f8e5486cfb9423e7df41ea38f2d","name":"Bob Cordemeyer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cff785f0fc6f161b65db99a8510b24bdfaf5744a433f705f274dbbca3b32d45d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cff785f0fc6f161b65db99a8510b24bdfaf5744a433f705f274dbbca3b32d45d?s=96&d=mm&r=g","caption":"Bob Cordemeyer"},"description":"Is voornamelijk werkzaam in de IT-rechtpraktijk. Doet veel (internationale) contractonderhandelingen aangaande distributieovereenkomsten, licentieovereenkomsten, outsourcing en gerechtelijke procedures waarbij auteursrecht, octrooirecht, merkenrecht en internetrecht essentialia zijn. Lees meer","sameAs":["https:\/\/www.cordemeyerslager.nl\/over-ons\/mr-b-a-m-cordemeyer"],"url":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/author\/bobcordemeyer\/"}]}},"mfb_rest_fields":["title","yoast_head","yoast_head_json"],"_links":{"self":[{"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/posts\/3355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/comments?post=3355"}],"version-history":[{"count":1,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/posts\/3355\/revisions"}],"predecessor-version":[{"id":3356,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/posts\/3355\/revisions\/3356"}],"wp:attachment":[{"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/media?parent=3355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/categories?post=3355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cordemeyerslager-nl.bearwithus.nl\/en\/wp-json\/wp\/v2\/tags?post=3355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}