Finally the European regulators have decided to act.
"The policy allows Google Inc (NASDAQ:GOOG) to combine data collected from one person using its disparate services, from Gmail to YouTube."
However Google doesn’t differentiate between the data collected so it treats data from search results and credit card numbers the same and can be used for any purpose that it deems fit.
The investigation noted that "the collection of data is not just limited to people with accounts to Google applications. The web giant can collect information from anyone who visits a website that has a link to its services - for example, a Google map posting."
The commission pointed out that of the top 500 most-visited sites in France, 90 percent had a link with Google.
With that kind of power, comes responsibility, the commission said.
Isabelle Falque-Pierrotin, president of the French National Commission on Computing and Freedom, said that Google would have three to four months to respond but that there wasn't a firm deadline.
"We haven't asked Google to go back to its old policy," she told reporters. "We've asked it to complete and clarify it on a certain number of points."