Google's use of people's personal data such as browsing history or targeted ads is in breach of the Netherlands' privacy laws according to the Dutch Data Protection Agency (DPA).
It wants the global tech giant to ask for users "unambiguous" consent before combining personal data from different services.
The agency also wants Google to be more transparent about which personal data is used by its services and the fact YouTube is part of Google.
Jacob Kohnstamm, chairman of the Dutch Data Protection Agency (DPA) said:
Google catches us in an invisible web of our personal data without telling us and without asking for our consent.
This has been ongoing since 2012 and we hope our patience will no longer be tested.
Google's privacy policies, which were introduced two years ago, have come under fire across Europe. Multiple countries, including France and Spain, have investigated whether it violates their privacy laws.