On 21 January 2019, French data protection authority Commission Nationale de l’Informatique et des Libertés (CNIL) imposed a penalty in amount of €50 million onGoogle’s U.S. headquarters – Google LLC – for infringements of General Data Protection Regulation (GDPR). Specifically, for lack of transparency, inadequate information and lack of valid consent regarding the ads personalization.
France on November 19, 2016, has the enacted a law giving a legal basis for class actions against both data controllers and processors if they breach French Data Protection Act. Under new law class actions can be brought by several individuals in a similar position incur damages resulting from a data controller’s or data processor’s infringement.
The new class action right does not allow individuals to claim financial compensation, however, they may seek for injunctive relief.
Dutch police have seized two servers belonging to Switzerland-based VPN provider Perfect Privacy. The VPN provider claims that Dutch police haven’t informed or contacted them about the reason servers were seized and about seizure they were informed by their hosting provider. Despite the seizure of servers, Perfect Privacy promises that no user data was compromised.