Google adopted in March 2012 a new privacy policy, which, among other things, allows Google to gather together users' personal data collected across all of its different services.

The Spanish and French data protection authorities have previously imposed fines on Google of EUR900,000 and EUR150,000 respectively, for failure to comply with their national data protection laws. Amongst others the Italian data protection authority (Garante per la protezione dei dati personali) has also found Google in breach of Italian data protection national laws.

The UK Information Commissioner's Office (ICO) has completed an investigation on the policy in question and has decided to refrain from taking formal enforcement action against Google at this stage. Last week, as a result of the investigation, Google has signed a formal undertaking to improve the information it provides to people about how it collects personal data in the UK.

As part of the undertaking, Google agrees to change the privacy policy and provide further notice to users about its processing activities, use of cookies and the meaning of technical terms. It also promises to simplify, enhance and unify general user privacy controls and to enhance its internal user data deletion policies.

This matter certainly will have an impact on other data controllers.

A copy of the undertaking is attached .