On October 16, 2012 and after several months' investigation led by the CNIL, the European data protection authorities have published their joint conclusions on Google's new confidentiality rules. The authorities recommended to Google to improve data subjects' information and clarify the combination of data across Google's services. Lastly, they asked Google to provide precise retention periods for the personal data it processes. After a 4 months deadline that was granted to Google in order to comply with the European data protection regulation and to implement effectively G29's recommendations, no answer has been given.
On February 18, European data protection authorities have noted that Google did not provide any precise and effective answers to their recommendations. In this context, the EU data protection authorities are committed to act and continue their investigations. Therefore, they propose to set up a working group, led by the CNIL, in order to coordinate their repressive action which should take place before summer.
This action plan was designed during a meeting that was hold in Paris at the end of January and will be submitted to the Article 29 Working Party for approval during the next plenary meeting on February 26.