Regulators didn’t go as far as to say the changes were illegal but they would like to see Google address some of the issues and require consent from affected users when dealing with certain data collection practices.
The key issue has to do with how Google collects user data from various sources and what they plan to do with it. The EU regulators believe that combining personal data on such a large scale creates a high level of risk with regards to user privacy.
Less than a week after the policy was updated, the EU assigned French data protection authority CNIL to investigate the matter. Google replied to the initial inquiry with a 94-page document that apparently didn’t meet the EU’s approval.