We realise that the decision not to pause has disappointed the Working Party. But after such an extensive notification it was difficult to see how such a pause was practically possible. At a practical level, “pausing” would have required us to launch yet another mammoth notification campaign, and would have proved confusing to our users.
Fleischer also says, “We are convinced that the overall package of our privacy notices respects completely the requirements of European data protection laws.”
I will publish the company’s answer to the rest of the CNIL questions when those answers are released.
What happens next? Jacob Kohnstamm, chairman of the Article 29 Working Party and head of the Netherlands’ data protection authority, told Reuters that Google could face a range of sanctions in the investigation. Reuters reports, “The CNIL can either issue an administrative caution, giving the company anything from a week to a few months to rectify their actions, or an outright fine, Kohnstamm said, explaining that many countries in the EU approach breaches differently.”