Fortune reports a whistleblower is alleging Google violated the EU General Data Protection Regulation by illegally maintaining job candidate data. Contractor Mohamed Maslouh filed complaints with the U.K. Information Commissioner's Office and Ireland's Data Protection Commission. While Google said it implemented a global automatic deletion tool last year, its rollout ended in the fall and the company was potentially noncompliant with the GPDR for four years. A spokesperson said Google's "tight policies, processes, and access restrictions" are in line with regulations, including the GDPR.