"We’re taking these claims seriously... violation of our requirements..." data would be retained for 18 months.
Surely if the data was collected in violation of Google's requirements (presumably don't get caught?) and without honestly telling the subjects who and what it was for they should delete it immediately.
Biting the hand that feeds IT
