On January 21, 2019, French data protection supervisory
authority CNIL imposed a fine of 50 million euros on GOOGLE LLC for
violations of the General Data Protection Regulation.
The proceedings were initiated after CNIL had received several
collective complaints shortly after the General Data Protection
Regulation (GDPR) had entered into force. As a first step, CNIL
found that GOOGLE did not have an establishment in the EU that
could take independent decisions on data processing. Therefore, the
"one stop shop" principle does not apply, according to
which only the local data protection supervisory authority is
competent for companies domiciled in the EU. Rather, any data
protection supervisory authority in the EU is entitled to pursue
infringements.
