Google (GOOGL.O) could be fined up 15 million euros ($18.6 million) if it does not stop violating the privacy of Internet users in the Netherlands, the Dutch data protection agency said on Monday.

The U.S. company is breaching the country's data protection act by using people's private information such as browsing history and location data to target them with customized ads, the Data Protection Authority (DPA) said.

The regulator gave Google until the end of February to change how it handles the data it collects from individual web users.