by misrepresenting the extent to which it maintains and protects the privacy and confidentiality of covered information[,] ... by failing to obtain affirmative consent from users prior to sharing their information with third parties [and] ... by failing to comply with the requirements of a comprehensive privacy program.

Last week, the EU's data protection authorities wrote a letter to Google asking it to delay implementation [JURIST report] of its new privacy policy. Google responded earlier this month to concerns [JURIST report] of US Congressmen about the new policy as well. It responded to 11 questions posed in a letter sent by the Congressmen [JURIST report] in January. Some topics of concern addressed by Google included assurance that no new types of data will be collected, reasons supporting data-sharing between Google products and an explanation of how data can be deleted by users once their accounts are closed. It also assured that it will comply with conditions of its settlement with the FTC.