Is there any way for EU citizens to hammer Google with GDPR over this? Isn't one of the stipulations of GDPR that a company must disclose privacy violations of

Is there any way for EU citizens to hammer Google with GDPR over this? Isn't one of the stipulations of GDPR that a company must disclose privacy violations of this nature?