The regulators at the EU Data Protection agency began digging into Google's recently updated privacy policies earlier this year, and found the new rules lacking.
The agency worries that Google may not respect "the key data protection principles of purpose limitation, data quality, data minimization, proportionality and right to object." In fact, the policy doesn't seem to put any limits on how data is collected and combined. "The EU Data protection authorities challenge Google to commit publicly to these principles," the complaint says.
The EDP doesn't suggest any penalties for these transgressions, at least not at this early stage. Instead, the agency provides "suggestions" for Google to follow. Big G should ask for user consent before applying collected personal data to advertising flow, give consumers easier ways to opt out of such personalization, and separate security code from advertising programs, the panel said.
In a statement quoted by several media outlets, Peter Fleischer, Google's global privacy chief, is quoted as saying that Big G is reviewing the EDP report. "We are confident that our privacy notices respect European law," he is quoted as saying.