Spain’s data protection watchdog ordered US Internet giant Google on Thursday to pay a fine of 900,000 euros (US$1.22 million) for “serious violations” of users’ privacy.
The Spanish Data Protection Agency accused the popular search provider of “illegal processing of personal data” obtained from users of various services, such as Google e-mail accounts.
“Google unlawfully collects and processes personal information” of users, the Spanish agency said in a statement.
“The agency considers that Google seriously violates the right to the protection of personal data,” it said.
It also accused Google of keeping the data for longer than is legally justified and of making it difficult for users to query the use of their data.
Google spokespeople could not immediately be reached for comment on Thursday, but El Pais newspaper quoted the company as saying it had been “totally involved” in the agency’s investigations.
It would “read the report carefully and then decide what steps to take next,” the newspaper quoted Google as saying.
The Spanish authority launched proceedings against Google in June. In September, France also said it would take action against the company, accusing it of breaching privacy norms.
Authorities in Germany, Italy, the Netherlands and Britain have also opened parallel procedures against Google.
The Spanish agency said it was the first of these six authorities to make a final decision on action against the US giant.
The EU warned Google in October last year that its new data protection procedures did not comply with an EU directive on the subject and gave the company four months to change them.
That deadline passed without any action, prompting France to set up the task force of individual member states pursuing the issue with Google.
Google has defended the changes it made last year, saying they simplify and standardize its approach across its various services.
Critics say the policy gives the operator of the world’s largest search engine unprecedented ability to monitor its users.