The French Data Protection Authority (CNIL) issued on 21 January 2019 the landmark decision against Google LLC for breaches of the GDPR on grounds of lack of transparency, insufficient information and lack of legal basis. Being the first decision issued by CNIL under the GDPR with the largest fine (€50 million) issued by that time, the case was also the first to address the question of application of the One Stop Shop mechanism. This article elaborates how in the absence of a main establishment, Google LLC could not benefit from the mechanism on appointing a lead DPA to act on behalf of other DPAs and argues that CNIL´s investigation and decision respected the EU procedures on cooperation and consistency.
We look forward to welcoming you on July 3-5, 2023 for our Annual Conference entitled "Islands and Ocean: Public Law in a Plural World." The conference will take place at the Victoria University of Wellington, in New Zealand. We will be announcing more details about the conference soon, including financial support to early career and global south scholars!