Spain’s data protection authority has fined Google €900,000 (US$1.2 million) and ordered the company to fall in line with the country’s data protection rules without delay.
 |
The Agencia Española de Protección de Datos (AEPD), said Thursday that Google does not provide users enough information about the personal information it collects, and the purposes it uses it for. It also objects to Google combining data gathered from its various services in violation of local laws.
The Internet company does not, for example, inform Gmail users that the content of mails and attached files are filtered to insert tailored advertising, AEPD said.
Google is also said to keep the data for periods longer than permitted under local data laws. The company was fined €300,000 for each of three violations, AEPD said.
”The combination of data collected through different services widely exceeds the reasonable expectations of the majority of users, who are not aware of it and lose control of their own personal information,” AEPD said.
Google modified its privacy policy in March 2012, giving it the right to use personal data collected from one service on its other services as well, triggering criticism from privacy experts.
The investigation carried out by the AEPD has shown that Google illegally collects and processes personal information of both authenticated users, who have logged in with their Google accounts, and non-authenticated users, as well as “passive users” who have not requested Google’s services but access Web pages that include elements managed by the Internet company, the data protection authority said.
”Google collects personal information through nearly a hundred of services and products offered in Spain, in many cases not providing adequate information about what data is collected, what data is used for what purposes and without obtaining a valid consent of the data subjects,” AEPD said.
Via : PCWorld
No comments