Search Privacy Fines

Online therapy service shared health data with advertisers including Facebook and Snapchat.

Google was fined with €7,000,000 by the Swedish Data Protection Authority due to failing to adequately comply with its obligations regarding the right of data subjects to have their search results removed from Google search. The Data Protection Authority of Sweden had already completed an investigation on Google in 2017 where it investigated how the company dealt with individuals’ requests to be removed from search results. At that time, the Data Protection Authority instructed Google to be more pro-active in executing these removal requests. In 2018 the Authority initialed a further investigation after it was reported that Google did not remove search results related to individuals even after the earlier instructions in 2017 to do so. The Authority also questioned Google’s practice of informing website owners about which search results Google had removed, specifically which link (search result) has been removed and who was behind the removal request.

Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR

Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR

Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 25 (1) GDPR, Art. 26 GDPR, Art. 28 GDPR, Art. 35 (7) GDPR

Articles: Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR

WhatsApp fined for transparency failures in processing user data.

Articles: Art. 5(1)(a), Art. 12, Art. 13

Articles: Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 (1) c) GDPR

Data broker settlement for unfair and deceptive practices in selling consumer data.

Musical.ly (now TikTok) collected personal information from children under 13 without parental consent.

Unlawful collection and use of biometric data of French residents.

Articles: Art. 6, Art. 9

Articles: Unknown

Multiple GDPR violations including failure to appoint representative.

Articles: Art. 5, Art. 27

Multiple GDPR violations including failure to appoint EU representative.

Articles: Art. 5, Art. 27

Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR

Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR

Articles: Art. 6 GDPR, Art. 13 GDPR

AI chatbot GDPR violations.

Articles: Art. 5, Art. 6

Failed to properly fulfill data access requests.

Articles: Art. 15

AI chatbot GDPR violations.

Articles: Art. 5, Art. 6

Failed to properly fulfill data access requests under right of access.

Articles: Art. 15

Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 12 (1), (2), (3) GDPR, Art. 21 (2) GDPR, Art. 24 (1), (2) GDPR, Art. 25 (1) GDPR

Articles: Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 28 (1), (6), (7) GDPR, Art. 35 (1), (2), (3) b) GDPR, Art. 44 GDPR, Art. 46 (2) GDPR

Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR

Articles: Art. 5 (1) a), b), d), e) GDPR, Art. 6 (1) GDPR, Art. 32 (1) GDPR, Art. 35 (2) GDPR

Articles: Art. 5 (1), (2) GDPR, Art. 6 (1) GDPR, Art. 7 GDPR, Art. 12 (2) GDPR, Art. 14 GDPR, Art. 21 GDPR, Art. 28 GDPR, Art. 29 GDPR