Google combines data gathered from Internet users, including payment information and location data from its different services without properly informing people or seeking their consent, the Dutch data protection authority said in an e-mailed statement today.
Google’s behavior “is forbidden by law,” Jacob Kohnstamm, the head of the Dutch regulator and also chairman of the group of EU data privacy watchdogs, said in the statement.
The company faces probes across Europe over changes to harmonize privacy policies for more than 60 products last year. Watchdogs from the 28-nation EU, that make up the so-called Article 29 Data Protection Working Party, wrote to Google Chief Executive Officer Larry Page last year, saying the company empowers itself to collect vast amounts of personal data about Internet users without demonstrating that this collection was proportionate.
The Dutch regulator today said it will decide on possible penalties after a hearing with Mountain-View, California-based Google, which it has requested.