OR Google is blamed by the Brave development team browser that it violates one of the principles of the General Data Protection Regulations (GDPRrelated to the requirement for companies to state a specific purpose for the collection and processing of personal data.
The principle of delimitation of its purpose GDPR requires all organizations that collect and process personal data to accurately state their purpose to consumers.
Ryan also claims that while the Google provides customized ads to users based on their interests, gives very limited information about the data processing they are subject to, and why users see a particular ad.
The complaint also includes a study called Inside the Black Box [PDF]. The research separates its processing purposes Google for collecting personal data from websites, applications and operating systems. The data comes from many different sources, and is often used for different purposes, such as analytics, or advertising.
Referring to the study, Ryan claims that its purposes Google "They have such a vague definition that they have no meaning or limitation; the result is an absolute freedom that violates the principles of GDPR".
"New data from Brave reveal that Google reuses our personal data between companies and its products in amazing ways that violate the principle of purpose limitation. Its internal data Google are free for all and violate him GDPR".
Brave's development team asked Google to provide a complete and sufficiently specific list of the purposes for which the company processes personal data, as well as the relevant legal bases for each purpose. THE Google has reportedly repeatedly refused to give a substantive explanation of the data processing purposes to the Brave team.
The DPC is already conducting an investigation into how Google processes and manages the data of its users. With this investigation, the Irish regulator is seeking to determine whether or not the company has a legal basis for processing user location data and whether these procedures are sufficiently transparent to the GDPR.