Google has been fined 50 million euros (around $ 57 million) by French regulators for not disclosing to users how their data was collected and used for targeted advertising.
The penalty is the largest imposed under Europe's new privacy law which came into force in 2018. The EU General Data Protection Regulations give Europeans more control over their information and how companies use it.
The French National Data Protection Commission said on Monday that it was imposing a fine after determining Google did not fulfill its obligations for transparency by making information about its data collection easily accessible to users. The Commission found that Google did not present information about the purpose of data processing and the period of data retention in the same place, sometimes requiring users to make five or six clicks to get information.
The Commission also found that Google has not presented information clearly and comprehensively, saying the company's description was "too generic and unclear." Google also does not get valid user approval for personalized ads because of insufficient information, the commission said.
"People expect a high standard of transparency and control from us," a Google spokesman said. "We are very committed to meeting those expectations and the terms of the GDPR agreement. We are studying the decision to determine the next step."
GDPR, which came into force in May, introduces tougher rules about processing and storing personal data and requires companies to seek explicit approval before using personal data. The company must be able to provide copies of personal data to its users and must report data violations within 72 hours.
Initially published at 9:16 am PT
Updated at 9:15 a.m. with Google's statement.