France is fining Google $204,000 for a 2012 decision to change the privacy policies of about 60 different Google properties and merge them into one, without giving users a way to opt out of the new policy.
Google did not comply with the ultimatum and was fined. France’s internet privacy oversight committee, the Commission Nationale de L’Informatique et des Libertes, attacked Google for “not sufficiently inform[ing] its users of the conditions in which their personal data are processed, nor of the purposes of this processing.” They also argued that there was “no legal basis” for the merger of privacy agreements, and that holding customers to a privacy agreement they did not sign was out of the bounds of the law.
Given that Google has implemented this policy change across all its platforms and throughout the world, other countries might also consider fining the company; Reuters lists Spain, Britain, Germany, Italy, and the Netherlands as the top contenders. There does not appear to be any European-wide infrastructure in which the countries could combine to punish Google for the violation, however, as European law does not address this violation specific to these countries.