France’s privacy watchdog, CNIL, has fined Google €150,000 for failing to conform to local law regarding tracking...
and storing user information.
Privacy groups are concerned that personal data is being stored in the US, reducing the control that European citizens have over their personal information.
These concerns have increased in the wake of claims by whistleblower Edward Snowden that US intelligence services have access to material stored in US-based cloud services.
In February 2013, CNIL warned that Google could face could face a coordinated "repressive action" if it failed to comply with EU recommendations.
- EU data protection regulators begin action against Google
- Google closer to action from European privacy regulators
- Google gets record fine over privacy bypassing cookies
- Google lacks enterprise credibility
- Google privacy re-write raises data protection concerns
The EU investigation began in March 2012, when Google started combining data from across its sites to better target advertising, which regulators see as "high-risk" to users’ privacy.
The new policy was implemented after the company combined 60 separate privacy policies into a single agreement, which raised privacy concerns on both sides of the Atlantic.
Google maintains that its privacy practices respect European laws.
"We have engaged fully with the authorities involved through this process, and we'll continue to do so going forward," it said in a statement.
Google fined for failure to comply
After Google failed to respond to the EU recommendations, CNIL issued a three-month deadline, which has now expired.
CNIL had demanded that Google specify what it is using personal data for, and how long it is held. It also wanted Google to let users opt out of having their data stored in a single location.
CNIL issued the fine for failure to comply and ordered Google to post the decision on its google.fr homepage for 48 hours within eight days of being officially notified of the ruling.
"The company does not sufficiently inform its users of the conditions in which their personal data are processed, nor of the purposes of this processing," CNIL said in a statement.
A Google France spokesman told Reuters the company will take note of this decision and consider further action.
Although Spain could impose a fine of up to €1m or $1.4m, even this is small in comparison with the $10.7bn net profit that Google earned in 2012.