ARTICLE · 16 JANUARY 2015

Dutch Data Protection Authority Threatens Google With A €15 million fine

Reed Smith (Worldwide)

Explore more from Reed Smith (Worldwide)

The Dutch data protection authority released a cease and desist order requiring Google to pay €60,000 per day, up to a maximum of €15 million, for violating Dutch data protection law.

NetherlandsPrivacy

Cynthia O'Donoghue

Author LinkedIn connections

The Dutch data protection authority, College Bescherming Persoonsgegevens (CBP), released a cease and desist order requiring Google to pay €60,000 per day, up to a maximum of €15 million, for violating Dutch data protection law, Wet bescherming persoonsgegevens(Wbp). Google has until the end of February 2015 to change the way it handles personal data.

The order requires Google to carry out three measures:

Ask for "unambiguous consent" before it shares personal data of Internet users with its other services, such as Google Maps and YouTube, the video-sharing site
Make it clear to users that Google is the owner of YouTube
Amend its privacy policy to clarify what data is collected and how the data is used

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

EU KIDS Act: What Digital Service Providers Need To Know

European UnionPrivacy

A New Sanction Against Uber Based On Automated Decision-Making

NetherlandsPrivacy

[Blog] Foot Et Contrefaçon

European UnionPrivacy

Novagraaf Netherlands BV

CJEU Publishes An Updated Fact Sheet Summarising Key Case Law On Protection Of Personal Data

European UnionPrivacy

CJEU Issues Judgment On Balancing The Right Of Access And Protecting Trade Secrets In Automated Decision-Making Processes

European UnionPrivacy

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

A New Sanction Against Uber Based On Automated Decision-Making

The Dutch Data Protection Authority has imposed a record-breaking €824.99 million fine on Uber for violating GDPR Article 22 through automated decision-making systems that deactivate driver accounts without meaningful human intervention. This landmark enforcement action, stemming from a 2020 class-action complaint filed on behalf of 170 Uber drivers, marks the third and most severe penalty against the ride-sharing giant for data protection violations.

NetherlandsPrivacy

Yahoo Faces Over 50 Lawsuits After Major Data Breaches

Yahoo suffered three significant data breaches affecting more than 1.7 billion users between 2012 and 2014.

De Brauw Blackstone Westbroek

CJEU Publishes An Updated Fact Sheet Summarising Key Case Law On Protection Of Personal Data

On April 28, 2025, the Court of Justice of the European Union (CJEU) published an updated version of the fact sheet (the Fact Sheet)...

European UnionPrivacy

CJEU Issues Judgment On Balancing The Right Of Access And Protecting Trade Secrets In Automated Decision-Making Processes

On February 27 2025, the Court of Justice of the European Union (CJEU) delivered a judgment in CK v Dun & Bradstreet (Case C-203/22).

European UnionPrivacy

Court Suspends Dutch Telecom Data Retention Act

Dutch telecom and internet providers are no longer required to retain the telephone and internet traffic data of their customers.

NetherlandsPrivacy

De Brauw Blackstone Westbroek

Privacy & Information Security Law Blog: Dutch DPA Publishes 2018 Report On Data Breach Statistics

On January 29, 2019, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, the "Dutch DPA") published a report (in Dutch) on the personal data breach notifications received in 2018

NetherlandsPrivacy

Hunton Andrews Kurth LLP

EU KIDS Act: What Digital Service Providers Need To Know

The European Commission has proposed the EU KIDS Act, introducing an EU-wide framework for minors' access to digital services through age-based restrictions and safety-by-design requirements. The proposal establishes tiered access rules for social media and video-sharing platforms, with independent accounts prohibited under age 13, guardian supervision required for ages 13-15, and autonomous access permitted from age 15. Digital service providers will need to navigate complex age assurance requirements whil

European UnionPrivacy

290 Million Reasons To Comply: Fine Imposed On Uber For Non-Compliant Third-Party Transfers

The Data Protection Authority in the Netherlands recently imposed a €290 million fine on Uber for breaching the EU GDPR requirement to have adequate transfer mechanisms in place...

NetherlandsPrivacy

Shepherd and Wedderburn

Getting Ready For The Digital Services Act: The Netherlands ACM Publishes For Consultation Its Draft DSA Guidelines

The European Union (EU) has introduced a landmark regulation known as the Digital Services Act (DSA).

European UnionPrivacy

WHOIS Has Been Replaced By RDAP: How Do The Two Systems Compare?

Overseen by the Internet Corporation for Assigned Names and Numbers (ICANN), the WHOIS protocol has been used since the early days of the internet to retrieve relevant information...

European UnionPrivacy

Novagraaf Netherlands BV