On 5 and 20 April 2012 Google answered the first questions.
The CNIL considered that Google's answers are often unclear and/or incomplete, and therefore sent an additional questionnaire on 22 May 2012; Google's reply is expected for 8 June 2012.
The CNIL wants clear explanations regarding:
- the processing of personal data (links between the collected data, the purpose and the recipients);
- the maximum retention period of the data;
- the combination of data services (purpose and breadth of the combinations),
- the actual effects of Google's opt-out mechanisms and the validity as a means to exercise the right to oppose;
- the way in which the ePrivacy Directive is applied for "passive users" of Google's services (advertising, analytics, +1 button) when they visit third-party sites.
After receiving Google's answers, the CNIL will then present its report to the Article 29 Working Party, which will state its position and send to Google, before mid-July, its recommendations as to the improvements that should be made in order to comply with the European data protection rules.
Read the additional questionnaire sent to Google: Additional questionnaire