Alex Osuch discusses the enforcement of the European Union’s (EU) General Data Protection Regulation (GDPR). This paper specifically looks at the case of Google incurring a record-setting €50 million fine from CNIL, the French Data Protection Authority, for failing to properly acquire consumer consent during the Android phone activation process. The implications of this ruling suggest thorny design issues with which all information organizations operating within the EU must contend.