French data protection officials have said they may fine Google if it does not change certain provisions of its privacy policy deemed to violate French data protection laws within three months.

Regulators from the French agency CNIL said Thursday that Google must clarify its policy to tell users what data it collects, its reasons for collecting it and how long it retains data. The search engine giant must also set reasonable limits for storage and get users’ permission to store cookies on their devices.

Google responded in a statement Thursday that its privacy policy “respects European law and allows us to create simpler, more effective services. We have engaged fully with the authorities involved throughout this process, and we’ll continue to do so going forward.”

Google’s privacy policy, which was modified to cover all of its services, has been in effect since March 2012. European data protection officials had asked the company to delay the updated policy last year to evaluate its effect on consumers, but Google moved ahead with its original timetable.

In October 2012, the agency openly criticized Google for folding 60 of its services under the same policy — a move that streamlined the company’s policies but also gave Google the ability to combine data collected from its signed-in users in new ways.

“Google empowers itself to collect vast amounts of personal data about internet users, but Google has not demonstrated that this collection was proportionate to the purposes for which they are processed,” the agency said in a letter last fall.

In its Thursday notice to the company, CNIL said that it that data protection authorities from other countries, including Germany, Italy, the Netherlands, Spain and the United Kingdom, have launched or will launch enforcement actions against Google.

Reuters reported that the Italian data protection agency is willing to consider sanctions if it finds the firm has breached privacy laws.

Related stories:

Google challenges U.S. gag order, citing First Amendment

Google to use balloons to provide free Internet access to remote or poor areas

Google, Waze make it official with acquisition announcement

Sign up today to receive #thecircuit, a daily roundup of the latest tech policy news from Washington and how it is shaping business, entertainment and science.