If Google doesn’t change how it handles users’ private data by the end of February, it may face fines of €15 million (about US$18.6 million), the Dutch Privacy Authority said Monday.
‘Google catches us in an invisible web of our personal data without telling us and without asking us for our consent. This has been ongoing since 2012 and we hope our patience will no longer be tested,’ said Jacob Kohnstamm, chairman of the Dutch DPA.
By the end of February, Google should get ‘unambiguous consent’ from its users before it combines personal data from different Google services to serve targeted ads, the DPA said. This could for instance be achieved by introducing a separate consent window.