French DPA fines Google for its Street View case with 100k Euro

This article is also available in:
Deutsch: [Französische Datenschutzbehörde straft Google Street View ab | http://www.unwatched.org/EDRigram_9.6_Frankreich_Geldstrafe_f%C3%BCr_Google_Street_View]

CNIL (the French DPA – Data Protection Authority) has recently performed a
series of inspections related to the conformity with the French legislation
of Google’s gathering data from Wi-Fi networks for its Google Maps, Street
View and Latitude services on France’s territory.

The inspections have revealed several infringements of the law, including
the collection, through Google’s Street View service cars, of WiFi data
without the knowledge of the data subjects and of content-related data such
as IDs, login details, emails and passwords.

In May 2010, CNIL formally notified Google of the infringements and,
as the company had not officially replied, on 17 March 2011, issued a
100 000 Euro fine on the company, the highest fine CNIL has applied since it
received, in 2004, the power to impose financial sanctions.

According to Google, the collection of the respective data was involuntary
and a mistake. “As soon as we realised what was going on, we have
immediately stopped our Street View cars” said Peter Fleischer,
Google’s Global Privacy Counsel, who added that all the collected
data can now be deleted.

CNIL confirmed that Google stopped collecting Wi-Fi data through its “Google
cars” and deleted the collected data. However, the DPA believes that
the company has not refrained from using the data without the knowledge of
the data subjects and, moreover, has continued to gather such kind of data,
without informing the data subjects, through users’ mobile terminals
connecting to the geo-location service, Latitude (smartphones, etc.).

“They were not always willing to co-operate with us, they didn’t give us
all the information we asked for, like the source code of all devices in the
Google cars,” said Yann Padova, CNIL’s executive director who added: “They
were not always very transparent.”

Google may appeal the fine in two months time.

Google Street View: CNIL pronounces a fine of 100,000 Euros (21.03.2011)
http://www.cnil.fr/english/news-and-events/news/article/google-street-view-cnil-pronounces-a-fine-of-100000-euros/

Cnil sanctions the blunder of «Google cars» (only in French, 21.03.2011)
http://www.lefigaro.fr/hightech/2011/03/21/01007-20110321ARTFIG00601-la-cnil-sanctionne-le-derapage-des-google-cars.php

France fines Google over Street View data blunder (21.03.2011)
http://www.bbc.co.uk/news/technology-12809076

EDRi-gram: Google admits it was gathering passwords and emails via
StreetView (3.09.2010)
http://www.edri.org/edrigram/number8.21/street-view-collects-emails