Google needs to provide clearer information to users on its personal data processing operations, the DPAs say. At the moment, a Google service's user is unable to determine which categories of personal data are processed for this service, and the exact purposes for which these data are processed.
Finally, the group says that Google has not provided a maximum retention period for the data.
See the policy recommendations by the EU DPAs, published by France’s DP Authority.
Spain:The application of Spain’s data protection law to online services and social media is covered in several sessions in PL&B’s Privacy Officers Network Briefing and Roundtable with Spain’s Data Protection Authority which takes place next month on 13 and 14 November in Madrid. The sessions cover online marketing (including a Supreme Court case brought by Spain’s Direct Marketing Federation); cookies; use of personal data and social media; legitimate interests as a legal basis for processing in the absence of consent; and the right to be forgotten – Spain’s DP Authority’s case for sanctions due to a refusal to delete personal data.