The search giant had refused to obey the order and had removed the data in question only from domains it operates in member states of the European Union.
Google had asked the Conseil d’État (Council of State in France) to annul the ruling, saying it did not consider that the right to be forgotten extended beyond the EU. But the CNIL did not do so, and fined the search giant €100,000 in 2016 for not obeying the order.
The verdict was not unexpected as an adviser to the court had supported Google's case back in January.
Google then made the changes needed to implement the order in all European countries. The French application wanted the right to be forgotten to extend around the globe, no matter where one viewed search results from Google.
A statement from the court on Tuesday said: "Currently, there is no obligation under EU law for a search engine operator who grants a request for de-referencing made by a data subject, as the case may be, following an injunction from a supervisory or judicial authority of a Member State, to carry out such a de-referencing on all the versions of its search engine.
"However, EU law requires a search engine operator to carry out such a de-referencing on the versions of its search engine corresponding to all the Member States and to take sufficiently effective measures to ensure the effective protection of the data subject’s fundamental rights."
In 2017, the Canadian Supreme Court told Google to block search results which were linked to a company alleged to be stealing trade secrets in Canada. An American judge later declared that this order could not be enforced in the US.
But Google finally agreed to comply with the Canadian ruling, which is still in place.