The Dutch Data Protection Authority has declared that Google's data-collection methods
"Google spins an invisible web of our personal data, without our consent," DPA Chairman Jacob Kohnstamm wrote in a statement
, which was spotted
. "And that is forbidden by law."
"Some of these data are of a sensitive nature, such as payment information, location data and information on surfing behaviour across multiple websites," Kohnstamm added. "Google does not adequately inform users about the combining of their personal data from all these different services. On top of that, Google does not offer users any (prior) options to consent to or reject the examined data processing activities."
The DPA has invited Google to attend a hearing, where the regulators will consider potential enforcement measures. The company is facing similar actions
from the EU and other countries.