Selected GDPR decisions from the month of March – Google imposed with fine of EUR 6.8 million for noncompliance of the right to erasure

The Swedish DPA has issued a fine of SEK 75 million (about EUR 6.8 million) to Google for not complying with regulations under the GDPR on “the right to be forgotten”.

For several years, the Swedish DPA has inspected Google, and in 2017 the DPA informed that they had assessed that it apparently was difficult for the Swedes to have resulted from Google’s search engines erased. 

Under the GDPR a person has a right to be forgotten or have his/her data corrected if they are incorrect, irrelevant or no longer necessary. 

In its decision, the DPA concluded that Google through its web removal form informs that notifications are sent to webpage owners in such way that individuals may be discouraged from exercising their right to request for erasure, thereby risking to undermine the effect of this option.

It is a violation of the GDPR when Google does not permit individuals to have their data removed from various Google software. Google is expected to appeal against the decision.

The Swedish DPA’s decision is available here (in Swedish)