France's CNIL (Commission nationale de l'informatique et des libertés) said it will initiate "a formal procedure for imposing sanctions, according to the provisions laid down in the French data protection law."
In February 2013, CNIL criticised Google for not responding to its privacy-related inquiries in a timely fashion. In April, it announced plans to crack down on Google, and by June, it threatened sanctions and imposed the three-month deadline.
The CNIL said its request wanted Google to:
- Define specified and explicit purposes
- Inform users with regard to the purposes of the processing implemented
- Define retention periods for the personal data processed
- Not proceed, without legal basis, with the potentially unlimited combination of users' data
- Fairly collect and process passive users' data
- Inform users and then obtain their consent in particular before storing cookies in their terminal.