The Swedish Data Protection Authority (DPA) has imposed a
fine of SEK 75 million (approximately EUR 7 million) on Google for
failure to comply with the GDPR.
In 2017, the Swedish Data Protection Authority (DPA) ordered
Google to delist certain search results about several different
data subjects from Google's search engine. In 2018,
responding to complaints that Google had not complied with the
previously issued order, the DPA initiated a follow-up audit.
The DPA discovered that Google had not properly removed result
listings it had been ordered to remove. This violated the General
Data Protection Regulation (GDPR) right to erasure. Google also
violated the GDPR by processing special categories of personal data
and data relating to criminal convictions and offences. Google had
in one case suggested that it was not obliged to remove the data,
as this was not part of the person's previous request, but
the DPA did not agree.
