Europe's General Data Protection regulation is looming--a law that protects user data stored by companies and also allows a "right to be forgotten." Breaking the law could cost 2% of revenues in fines.
Spain's Data Protection Agency said there was evidence that Google was guilty of disproportionate use and storing private data for excessive periods, among other charges. Google insists it has not broken EU laws.
German authorities have launched a legal case against Facebook for violation of the nation's strict user privacy laws. The case hinges on Facebook's retention of data on people who hadn't signed up to Facebook themselves.