Google could face up to a $18.6 million fine if it doesn't stop violating the internet privacy of Dutch citizens, a privacy watchdog group said on Monday.
According to the group, the Dutch Data Protection Authority (DPA), Google is violating the Netherland's data protection act by using people's private browsing history and location data to send targeted advertisements, Reuters reported.
The group is giving Google until the end of February to comply with measures that would require the company to be more transparent with Dutch users regarding how their personal information is used by various Google services.
Google's new privacy guidelines, introduced in 2012, brought the company under investigation from Data Protection Agencies in five other European countries as well - France, Germany, Italy, Britain and Spain, said DPA.
Without adequately informing users in advance, Google compiles data from search engine queries, emails, third-party website tracking, location data and video browsing to tailor custom advertising to its users.
This practice "catches us in an invisible web of our personal information, without telling us or asking our permission," Jacob Kohnstamm, chairman of the DPA, told The Associated Press.
In order to comply with the law, Google must first "clearly and consistently" inform users in advance about what personal data is being used, according to the DPA.
Al Verney, a Google Spokesman, told AP, "We're disappointed with the Dutch DPA's order, especially as we have already made a number of changes to our privacy policy in response to their concerns."
"However, we've recently shared some proposals for further changes with the group of European DPAs and we look forward to discussing with them soon."
In July, a lawsuit was upheld by U.S. District Judge Paul Grewal claiming the company was offering user data to advertisers without their permission.