France, Spain take action against Google on privacy

PARIS/MADRID Thu Jun 20, 2013 2:37pm EDT

An illustration picture shows a woman holding her Apple Ipad tablet which displays a tactile keyboard under the Google home page in Bordeaux, Southwestern France, February 4, 2013. REUTERS/Regis Duvignau

An illustration picture shows a woman holding her Apple Ipad tablet which displays a tactile keyboard under the Google home page in Bordeaux, Southwestern France, February 4, 2013.

Credit: Reuters/Regis Duvignau

PARIS/MADRID (Reuters) - France and Spain led a Europe-wide push on Thursday to get U.S. Internet giant Google to change its policies on collecting user data.

News that the U.S. National Security Agency under the Prism surveillance program secretly gathered user data from nine U.S. companies, including Google, to track people's movements and contacts makes the timing especially sensitive for Google.

France's data protection watchdog (CNIL) said Google had broken French law and gave it three months to change its privacy policies or risk a fine of up to 150,000 euros ($200,000).

Spain's Data Protection Agency (AEPD) told Google it would be fined between 40,000 euros and 300,000 euros for each of the five violations of the law, that it had failed to be clear about what it did with data, may be processing a "disproportionate" amount and holding onto it for an "undetermined or unjustified" period of time.

The CNIL, which has been leading Europe's inquiry since Google launched its consolidated privacy policy in March 2012, said Britain, Germany, Italy and the Netherlands would be taking similar action against the world's No. 1 search engine.

Google could face fines totaling several million euros.

"By the end of July, all the authorities within the (EU data protection) task force will have taken coercive action against Google," said CNIL President Isabelle Falque-Pierrotin.

Last year, Google consolidated its 60 privacy policies into one and started combining data collected on individual users across its services, including YouTube, Gmail and social network Google+. It gave users no means to opt out.

National data protection regulators in Europe began a joint inquiry as a result. They gave Google until February to propose changes but it did not make any. Google had several meetings with the watchdogs and argued that combining its policies made it easier for users to understand.

The CNIL's move is seen by legal experts and policymakers as a test of Europe's ability to influence the behavior of international Internet companies.

Britain is still considering whether its law has been broken and will write to Google soon with its findings, the CNIL said.

And Google is due to answer allegations on the issue in a German court hearing late next week, a spokesman for the country's data protection regulator said.

Google said it would continue to work with the authorities in France and elsewhere.

"Our privacy policy respects European law and allows us to create simpler, more effective services. We have engaged fully with the authorities involved throughout this process, and we'll continue to do so going forward," a spokesman said by email.

FILED UNDER:
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (14)
r.felder wrote:
A fine of $200k is not even enough to make Google blink.

Jun 20, 2013 8:48am EDT  --  Report as abuse
koconnor100 wrote:
Googles only option is to withdraw services from these countries.

USA law forces them to basically rape all privacy laws everywhere , and prohibits them from stopping.

It will be fascinating to see if some kind of accomidation is made, or if all USA companies (they’re all forced to follow USA law regarding PRISM) will find themselves black listed from the rest of the world .

It’s a new age. The post- PRISM age. This won’t be boring.

Jun 20, 2013 12:36pm EDT  --  Report as abuse
sensi wrote:
@ r.felder
The fine is mostly symbolic, the ruling would not and certainly be a start for more legal problems if left unanswered by Google.

@ koconnor100
My wild guess is that the NSA eavesdropping revelations will see a trend of countries and parliaments forcing Google and others significant international internet services providers to repatriate the user data of their citizens on their own soil, where it would be subject to the national law and respect of privacy, and forbid that private data from going or being hosted out of their jurisdiction, left wild open for the US military and contractors…

Jun 20, 2013 8:20pm EDT  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.