France's National Commission on Computing and Freedom led a European investigation into Google's new unified policy, which replaces individual policies for its search, email and other services and regulates how it uses the personal data it collects.
The commission said Tuesday that it has three main concerns about the policy: it's not clear enough in explaining to users what data is collected and how it will be used; it's too difficult for users to opt out of data collection; and Google doesn't say how long it will hold onto data.
Google responded that it is reviewing the commission's report but that it believes its policy respects European law.
Under Google's new plan, which came into effect on March 1, the company linked all of a user's data together when logged into a Google account and using various services, including email, video and social networking sites.
This allows Google to know more about its users and their activities on the web, allowing it to target search results and advertising.
Canada's privacy commissioner, Jennifer Stoddart, has written to Google to express concerns over the data merge, saying it may make some people uncomfortable.