According to a Dutch Data Protection Authority (DPA) report, Google does not adequately inform users which personal data it collects and combines, and for what purpose.
"Google spins an invisible Web of our personal data, without our consent. And that is forbidden by law", the chairman of the Dutch data protection authority, Jacob Kohnstamm, said in a statement.
The Dutch DPA has invited Google to attend a hearing, after which the agency will decide whether it will take enforcement measures.
In February 2013, CNIL criticized Google for not responding to its privacy-related inquiries in a timely fashion. In April, it announced plans to crack down on Google, and by June, it threatened sanctions and imposed the three-month deadline. Nothing was resolved, and in late September, CNIL announced plans to initiate "a formal procedure for imposing sanctions, according to the provisions laid down in the French data protection law."
The ruling will make for smiles all round at Microsoft, where their new Scroogled campaign just getting underway.