Google's methods of collecting personal data without express permission is illegal in the EU. Sadly, typical of the EU, the Privacy Commissioner has reached the end of his contract and none of the current applicants have been judged sufficiently experienced to take his place.
However the new directive on online privacy which is slowly wending it's way through the system is even tighter than the present standards so the fines should be coming thick and furious in the future, on a European rather than a country level. A suggested level that is being considered is 2% of global turnover.
Nemesis will come, in due course. Google is not the only company, of course, that could fall foul of this issue.