The biggest penalty so far under new EU rules was justified by the severity of the infringements of transparency, information and consent, France's regulator ruled. It is a challenge to Google's business model.