Preliminary findings show that Google’s new policy fails to meet the requirements of the European Data Protection Directive (95/46/CE) regarding the information that must be provided to data subjects. Moreover, the CNIL and the EU data protection authorities are deeply concerned about the combination of data across services and will continue their investigations with Google’s representatives. The CNIL reiterated its request to Google to postpone the application of the new policy, on behalf of the Article 29 Working Party.
Google announced that the proposed privacy changes, which are due to take effect tomorrow and will have a variety of effects on privacy, depending on the service you are using, were vetted by European privacy authorities extensively before they were released. CNIL claims that this was not the case, with most privacy experts seeing the proposed policy only hours before it was released.
Google says it won't delay the change because it will only serve to confuse users, even though 37 attorneys general and the CNIL are challenging the legality of the policy change. With the amount of attention this policy change is receiving, we can count on a series of legal challenges if it does move forward tomorrow.