France: sanctions for Google

In June 2013, CNIL, the French data privacy regulator, gave Google three months to change its privacy policy.  The issue resolved around Google’s introduction of a single profile per user across its different services.  Google has consistently argued that its policy does not contravene privacy rules. 

With the deadline now passed, France is moving to impose sanctions and has called on Google to:

• Define specified and explicit purposes
• Inform users with regard to the purposes of the processing implemented
• Define retention periods for the personal data processed
• Not proceed, without legal basis, with the potentially unlimited combination of users' data
• Fairly collect and process passive users' data
• Inform users and then obtain their consent in particular before storing cookies in their terminal.

Source: ITProPortal.