The Dutch data protection authority, College Bescherming Persoonsgegevens (CBP), released a cease and desist order requiring Google to pay €60,000 per day, up to a maximum of €15 million, for violating Dutch data protection law, Wet bescherming persoonsgegevens(Wbp). Google has until the end of February 2015 to change the way it handles personal data.
The order requires Google to carry out three measures:
- Ask for “unambiguous consent” before it shares personal data of Internet users with its other services, such as Google Maps and YouTube, the video-sharing site
- Make it clear to users that Google is the owner of YouTube