
The CBP has ordered Google to ask users for clear permission before processing their personal data for Google services. This may happen on a separate screen with an opt in, before proceeding to the Google services. Such permission may not be obtained by a change to general terms and conditions. YouTube must also be named in the process. In addition, Google must amend its privacy policy to inform users clearly which personal data is by Google services. Google has until the end of February 2015 to implement the changes, after which the regulator will verify whether sanctions are in order.