Posts Tagged French SC
The GDPR’s one stop shop principle put to the test in French Supreme Court confirmation of CNIL jurisdiction over Google Android case. The Court also rebukes the spaghetti bowl of consent ticking and unticking.
Thank you Gaetan Goldberg for flagging that the French Supreme Court has confimed on 19 June last, jurisdiction of the French Data Protection Agency (‘DpA’), CNIL for issuing its fine (as well as confirming the fine itself) imposed on Google for the abuse of data obtained from Android users. The Court was invited to submit preliminary references to the CJEU on the one-stop shop principle of the GPDR, but declined to do so.
Readers of the blog know that my interest in the GDPR lies in the jurisdictional issues – I trust date protection lawyers will have more to say on the judgment.
With respect to the one stop shop principle (see in particular A56 GDPR) the Court held at 5 ff that Google do not have a ‘main establishment’ in the EU at least not at the time of the fine complained of, given that the Irish Google office (the only candidate for being the ‘main establishment) at least at that time did not have effective control over the use and destination of the data that were being transferred – US Google offices pulling the strings on that decision. A call by the CNIL under the relevant EU procedure did not make any of the other DPAs come forward as wanting to co-ordinate the action.
On the issue of consent the SC referred to CJEU Cc-673/17 Planet49 and effectively held that the spaghetti bowl of consent, ticking and unticking of boxes which an Android user has to perform to link a Google account to Android and hence unlock crucial features of Android, do not amount to consent or proper compliance with GDPR requirements.
French SC confirmation of French DPA fine in #Android data case
On jurisdiction, rejects application of #GDPR one stop shop principle on the basis that #Google's Irish representation does not have decision power over use of the data
See 3 ff of judgmenthttps://t.co/ZVAuZnjznd https://t.co/Jqz7Mm2nfl pic.twitter.com/WBAhjdudVJ
— Geert Van Calster (@GAVClaw) June 19, 2020
- Sodmilab. The Paris Court of Appeal on lois de police, Rome I, II and commercial agency. 02/07/2020
- On the nature of private international law. Applying islamic law in the European Court of Human Rights. 01/07/2020
- The GDPR’s one stop shop principle put to the test in French Supreme Court confirmation of CNIL jurisdiction over Google Android case. The Court also rebukes the spaghetti bowl of consent ticking and unticking. 25/06/2020
- The Prestige recognition tussle – ctd. On arbitration and state immunity. 24/06/2020
- Szpunar AG in Ellmes Property Services. Again, on rights in rem and, more challenging, on forum contractus and the spirit of CJEU De Bloos. 22/06/2020
Also of noteMy Tweets