Google's claims in this area seem simple and strong. What are you suggesting?

"Google will only access, use, and otherwise process Customer Data in accordance with the Cloud Data Processing Addendum and will not access, use, or process Customer Data for any other purpose. Without limiting the generality of the preceding sentence, Google will not process Customer Data for Advertising purposes or serve Advertising in the Services. Google has implemented and will maintain technical, organizational, and physical safeguards to protect Customer Data, as further described in the Cloud Data Processing Addendum."

I read this earlier this year:

https://news.bloomberglaw.com/litigation/google-hit-with-pri...

But I'm certain there were more similar suits in the USA. I don't think there's been one in Canada.