Google to be summoned over data grab 'excesses'

Search firm to be asked why it hasn't changed privacy policy since being found in breach of European law over users' data

Google was criticised by European data protection officials for its 'uncontrolled' and 'excessive' collection of information about internet users. Photograph: Martin Keene/PA

Google representatives are to be summoned to appear before European data protection officials over concerns about the way it collects data on web users.

The US search company will be asked to explain why it has not taken "any precise measures" to change its privacy policy since October 2012, when authorities found it was in breach of European law.

On Thursday, a coalition of 30 data protection officials, including Britain's information commissioner, demanded "significant progress" from Google before the summer.

The statement said: "In October 2012, the Article 29 Working Party highlighted deficiencies in Google's privacy policy and gave some recommendations to Google on how to address these.

"To date, considering that Google has not taken any precise measures in response to those recommendations, the requirements of Directive 95/46/EC are still not complied with."

An inquiry by European privacy regulators, led by France's CNIL, criticised Google for its "uncontrolled" and "excessive" collection of information about internet users, in some cases without their consent. The statement continued: "DPAs [data protection authorities] will continue their investigations in close cooperation and take all necessary actions according to their competences and powers. Significant progress on these actions will be made before summer. A taskforce led by the French DPA (CNIL) will help to coordinate these actions."

The authorities are concerned about changes Google introduced to its privacy policies in March last year. The changes were made to "unify" how information is collected across approximately 60 products, including YouTube GoogleMail, Google has said.

But an investigation by the data protection bodies concluded that the company gives insufficient information or control to its users about how it handles their information.

The watchdogs recommended Google change its policy to allow users to choose when their information is combined and make it easier for people to opt out.

A spokesperson for Google said: "Our privacy policy respects European law and allows us to create simpler, more effective services. We have engaged fully with the CNIL throughout this process, and we'll continue to do so going forward."

Previously, Google has said it is confident that its privacy notices "respect European law" and that it was reviewing the findings of the data protection officials.