On October 16, 2012 and after several months' investigation lead by France's CNIL data protection agency, the European data protection authorities have published their joint conclusions on Google's new confidentiality rules. The authorities recommended to Google to improve data subjects' information and clarify the combination of data across Google's services. Lastly, they asked Google to provide precise retention periods for the personal data it processes. After a 4 months deadline that was granted to Google in order to comply with the European data protection regulation and to implement effectively G29's recommendations, no answer has been given.
On February 18, European data protection authorities have noted that Google did not provide any precise and effective answers to their recommendations. In this context, the EU data protection authorities are committed to act and continue their investigations. Therefore, they propose to set up a working group, lead by the CNIL, in order to coordinate their repressive action which should take place before summer.
This action plan was designed during a meeting that was hold in Paris at the end of January and will be submitted to the Article 29 Working Party for approval during the next plenary meeting on February 26.
Google said that its confidentiality policy is in line with European law.
EU competition authorities are separately looking at whether Google used its search engine to boost its own services and disadvantage competitors by preferential rankings.
Google has responded to that probe, submitting last month proposals aimed at ending the EU probe into its dominance of online search advertising platforms.