France's CNIL (Commission nationale de l'informatique et des libertés) said it will initiate 'a formal procedure for imposing sanctions, according to the provisions laid down in the French data protection law.'
In Feb. 2013, CNIL criticized Google for not responding to its privacy-related inquiries in a timely fashion. In April, it announced plans to crack down on Google, and by June, it threatened sanctions and imposed the three-month deadline.
The CNIL said its request wanted Google to:
Define specified and explicit purposes Inform users with regard to the purposes of the processing implemented Define retention periods for the personal data processed Not proceed, without legal basis, with the potentially unlimited combination of users' data Fairly collect and process passive users' data Inform users and then obtain their consent in particular before storing cookies in their terminal.