Amid growing pressure for Google to bring itself more in line with European privacy laws, a German regulator has ordered Google to seek user permission before profiling them across its services.
The Hamburg commissioner of data protection and freedom of information on Tuesday raised the prospect of fines for Google if it doesn't make major changes to the way it processes user data in the country.
"Google is ordered to take the necessary technical and organisational measures to guarantee that their users can decide on their own if and to what [extent] their data is used for profiling," the regulator said in a statement.
It says the collection of data from users registered with multiple services, such as Gmail, Android and search, allows the creation of "meaningful" and "nearly comprehensive" personal records — for example, detailed travel profiles, financial status, whereabouts, and habits, as well as inferred information about relationships, sexual orientation, and relationship status.
Commissioner Johannes Caspar said it had suggested ways Google could improve its handling of user data in Germany but that "Google has not been willing yo abide by the legally binding rules and refused to substantially improve the user's control".
"So we had to compel Google to do so by an administrative order. Our requirements aim at a fair balance between the concerns of the company and its users. The issue is up to Google now. The company must treat the data of its millions of users in a way that respects their privacy adequately while they use the various services of the company," said Caspar.
Last week, Europe's group of top privacy watchdogs wrote to Google CEO Larry Page reminding him that Google need to comply with European and national data protection legal frameworks, providing a list of suggested measures the company could implement to better inform users about Google's data handling and provide them with more control.
Read more on this story