If Google does not change its policy to comply with the UK Data Protection Act by September 20, it could face formal enforcement action, the ICO said yesterday. ICO can issue monetary penalties of up to £500,000 ($752,000) for serious breaches of the Data Protection Act.
"In particular, we believe that the updated policy does not provide sufficient information to enable UK users of Google's services to understand how their data will be used across all of the company's products," the ICO said.
ICO's action echoes actions taken by other data protection authorities across the EU. Last month, authorities in France and Spain ordered Google to change its policy, and yesterday a German regional data protection authority also announced formal action against the company.