The company “empowers itself to collect vast amounts of personal data about ” without demonstrating that this “collection was proportionate,” the privacy regulators said in a letter today to Chief Executive Officer , obtained by .
“Google should modify its practices when combining data across services,” according to the letter. The company should clarify why and how it combines data, and report on how it processes users’ personal information, the regulators said.
Google, operator of the world’s largest search engine, is facing privacy investigations by authorities around the world as it debuts new services and steps up competition with for users and advertisers. Google changed its system this year to create a uniform set of policies for more than 60 products, unleashing criticism from regulators and consumer advocates concerned it isn’t protecting data it collects.
Google spokeswoman Niki Fenwick declined to comment on the letter today.
Google has also faced scrutiny over its Street View mapping service after cars it sent out to take photos collected so- called payload data from unrestricted Wi-Fi networks. The company said it was done mistakenly. CNIL issued its heaviest sanction after the incident, fining the company 100,000 euros ($129,000) in 2011.
Google described the policy, which took effect on March 1, as “providing users with clear and comprehensive information about how we use data,” according to an Oct. 11 e-mail from Brussels-based spokesman Al Verney. “We are confident that our privacy notices respect the requirements of European data protection laws,” he said.
Some European authorities, like CNIL, can impose fines for non-compliance, though the letter contained no details on the consequences of refusing to change the policy. Google twice rebuffed CNIL requests to wait to implement the changes until it could assess whether they comply with the bloc’s standards.
“There’s a bit of ‘payback’ here as well,” said , an analyst at Opus Research in . “Google decided to go ahead and implement the new policy despite being asked to delay it by European regulators who wanted more time to study it.”