It’s not necessarily clear that there are any teeth behind these recommendations, though the French National Commission for Computing and Civil Liberties talked up sanctions and enforcement at a news conference in Paris earlier today, where 27 European data protection authorities signed onto a letter sent to Google CEO Larry Page. As of today, there was no finding of illegality and no imposition of a fine.
Here’s a sampling of the requests:
- Google should be clearer about what data it is collecting and give users better control of it. Data collection should “remain proportionate to the purposes pursued.”
- Google should put all its opt-outs together, and make it easier to opt out of new services and combinations of services.
- The company shouldn’t combine user data meant for different purposes, like security and advertising.
- Google should provide clear timeframes for data retention.
- Some countries are particularly concerned about facial recognition and want better warnings about collection of biometric data.
The letter is embedded below, and you can find the full recommendations here.