According to the Dutch Data Protection Authority (DPA), Google's practice of combining personal data from its different services violates Dutch data protection law.
In March 2012, Google introduced a new privacy that allows the sharing of personal data across all of its products and services. However, Google made the changes without adequately informing users, and without asking for their consent, the DPA said.
“The investigation shows that Google is not properly informing users about what personal data is collected and combined, and for what purposes,” he said. “In doing so, Google is creating an invisible web of our personal data, without our consent, which is prohibited by law.”.
Google denied the accusations, stating that the company's privacy policy respects European law and allows for the creation of simpler and more efficient services.
The DPA said it would not take legal action against Google for the time being, which has been summoned to a hearing, during which the Dutch authority will decide whether action is necessary.
