I mean, it boils down to "you have collected something which is illegal and invasive to have ... why don't you give it to us and we'll, er, keep it safe."
No, it boils down to "you have told us you take photos from public places of houses, then you have to admit, that you also collect MAC-addresses and SSIDs (which you 'forgot' to mention when we talked about it) and then just two weeks later you tell us, 'whoops, we also collected some mails and some web sessions, sorry' and now we want to see, what you have collected, as we don't see any more reason to trust you".
And in case you wonder, it is possible that Google broke the privacy laws, which in Germany also apply to unencrypted communication and might be liable. Courts here have ruled, that the Apache logfile also violates privacy, as it is not legal to gather privacy related data on people without their consent and without a specific reason justified by legal provisions or necessary to do your business. You also have to delete the data when it is no longer needed.
In any case, should Google actually have broken the law, then the charge for it would 2 to 5 years, but it is not entirely clear, if the law applies, because you have to prove intent and who knows how long this could drag on.