Swedish DPA Datainspektion issues a fine of €6 980 000 towards Google for breach of the GDPR.

Following a case from 2017, where Datainspektionen decided that certain personal data should be removed, they have now found that Googles ability to execute the 2017 decision is faulty in regards to the right to be forgotten.

In one case, the removal has taken to much time.

In the second case, the removal has not been complete.

Swedish DPA also critizes Googles process for notifying site owners that personal data has been removed. The notice contains both information about what site has been corrected, but also information on who required the removal. Datainspektionen is of the opinion that Google lacks a legal basis for sending such personal data to site owners.