Google merged 60 privacy policies into one last year and started mixing data collected on users across its services. It gave the users no means to opt out. So far Twenty-nine European data protection regulators began a joint enquiry which is led by France's CNIL. The findings of the inquiry ruled that Google's new policy posed a "high risk" to the privacy of individuals.
While it stopped short of calling the policy change illegal, the regulators gave Google until February to propose changes but the search engine did not make any.
Isabelle Falque-Pierrotin, CNIL's president said that regulators in six states have begun the process of looking at penalties, and each must now act based on national law. It will no longer be possible for Google to just promise to change, apparently “the clock is ticking.”
The six states have the power to impose fines on Google but each must go through a local inquiry to determine that a wrong had been committed under national law even after the European joint position published in October. However they will use the joint analysis to underpin their investigations and will "not start from scratch.”