A complaint about the company's data access request process is set to cost Spotify €5 million in fines, though it took four years of wrangling to determine that a GDPR violation took place.
A decision has found GDPR violations in the TCF consent management systems widely used by ad networks, ruling that the process is not adequately transparent to data subjects and does not inform them or secure their data properly.
The Austrian data protection authority has found that the IP addresses and identifiers in Google Analytics cookie data were sufficiently personal to constitute a GDPR violation for purposes of transfer to the US.
Irish DPC is launching an investigation on potential GDPR violation of Google’s Ad Exchange online ad system which is active on 8.4 million websites worldwide.
