Brussels, 18/02/2013 (Agence Europe) - The twenty-seven national data protection authorities in the EU represented on an Article 29 Group chaired by CNIL of France, are preparing to take action against US internet giant Google, which has failed to respond to the request made by the EU in October 2012 that it change its confidentiality rules, explained CNIL in a press release on Monday 18 February. CNIL was instructed by the other 26 data protection agencies to examine Google's new search engine privacy rules in March 2012 and found in October that it breached the EU's 1995 data protection directive in several instances (the directive is currently being updated) and urged Google to comply, recommending clearer information about the use of personal data and providing the users of Google, Google+, Youtube and the like with better control of how personal information was sent from Google to Youtube and other platforms. CNIL asked Google to change its practices to avoid excessive collection of personal information. Four months later, CNIL has not received any response and says that the European authorities are determined to act and pursue their investigations, suggesting that a work group be set up, chaired by CNIL, to coordinate repressive action, which should occur by the summer. In October, CNIL said that it would be for national data protection authorities to decide on the type of penalties, which can include fines.
Under the EU directive, not all European data protection authorities can apply penalties, but new rules unveiled in January 2012 aim to remedy this. At present, the highest fine possible in Spain is a mere €600,000 and in France it is even lower, up to €300,000, says the European Commission. A new regulation unveiled by Commissioner for Justice, Fundamental Rights and Citizenship Viviane Reding will simplify dispute settlement and the issuing of penalties with a single authority being responsible for penalties on behalf of all the rest and fines of up to €1 billion and 2% of a company's turnover being possible. The European Commission has welcomed the CNIL's announcement, pointing out that any company providing services to European consumers has to comply with EU data protection rules. (SP/transl.fl)