According to a Dutch Data Protection Authority (DPA) report, Google does not adequately inform users which personal data it collects and combines, and for what purpose.
"Google spins an invisible Web of our personal data, without our consent. And that is forbidden by law", the chairman of the Dutch Data Protection Authority, Jacob Kohnstamm, said in a statement.
In response, Google said it did give users detailed information about the data it was collecting and what would be done with it.
Google has been invited by the Dutch DPA to attend a hearing, after which the agency will decide whether it will take enforcement measures.