On 27 February 2012, in a letter addressed to Google Inc. CEO Larry Page, the French DPA (CNIL) affirmed that “preliminary analysis shows that Google’s new policy does not meet the requirements of the European Directive on Data Protection (95/46/CE), especially regarding the information provided to data subjects“.
In the opinion of the DPA”the fact that Google informs users about what it will not do with the data (such as sharing personal data with advertisers) is not sufficient to provide comprehensive information either“. The DPA considered that more information should be given to the data subject on service and the purpose of the processing for which the data are collected.
The DPA considered that further information should be provided to the person concerned in the service and the purposes for which data are collected.
The letter ended by stating that “The CNIL and the EU data protection authorities are deeply eoneerned about the combination of personal data across services: they have strong doubts about the lawfulness aud fairness of such processing, and about its compliance with European Data Protection legislation, especially with articles 6 and 7 ofthe Data Protection Directive“.