
As part of the 18-month process to remedy the situation, Google has been ordered to submit a document by 30 September setting out a roadmap of the steps it intends to take to comply with the regulator's decision, which will become binding once signed. These include the need to explicitly inform users that the profiling is being done for commercial purposes, obtaining their valid consent for each specific Google service (be it Gmail, YouTube, Google+ and others), and giving them the option to have their personal data deleted within two months.
A spokesman for Google said the company had always cooperated with the regulator and would continue to do so. However, the regulator did not make any specific statements regarding the 'right to be forgotten' rule, which gives individuals the right to request the removal of information about them from search results, preferring to wait and see how the EU Court of Justice’s judgment is applied.