The Dutch data protection agency CBP has accused internet service Google of breaking Dutch privacy laws with its revised privacy rules which were introduced in March.
The CPB says Google has not made it clear enough to users what it is doing with all the information collected by various Google services and does not ask for their consent.
‘Google spins an invisible web of our personal data, without our consent. And that is forbidden by law,’ said authority chairman Jacob Kohnstamm in a statement.
By combining information taken from its services such as Youtube, Streetview and its search engine, Google has access to sensitive information such as viewing habits, location and surfing behaviour.
But Google has ‘has failed to put adequate safeguards in place to ensure the combining of data is strictly limited to what is necessary in the context of legitimate purposes and that the data subject’s right to protection of their privacy prevails.’
The watchdog has now invited Google to attend a hearing before deciding what action to take.
Read an English summary of the report