German regulator demands that Google stop extensive user profiling

According to the German regulator HmbBfDI, Google must handle the data it collects from its users differently. The company is no longer allowed to combine data from different services in order to create an extensive ‘user profile’.

According to the regulator, Google is violating a German telecom and data protection law. Comprehensive user profiles can be drawn up with the data that the internet giant collects through its services. This includes location data from mobile phones, user interest by analyzing searches and relationships with other people by analyzing ‘social’ interactions. Combining such data would allow Google to learn excessive amounts about its users.

Although Google may use personal data for personalized advertisements, the far-reaching way in which Google draws up user profiles is prohibited as long as the user does not give explicit permission, according to the German regulator. The HmbBfDI decided to intervene after some talks with the internet giant led to little progress. In a response to PC World, Google states that it has cooperated with the requests of the German regulator. The company says it is still considering next steps.

In addition to violating German law, according to the HmbBfDI, European laws would also be violated by Google. As a result, the ruling of the German regulator could in the long run also have consequences for the way in which Google collects information from its users in other European countries. The research that preceded the HmbBfDI ruling was also conducted in a European context.

The ruling has given Google a formal injunction to change its user data handling practices. If the company does not comply, it is possible that a fine will be imposed. Google is under fire in several European countries for possible violations of the privacy of its users.