May 28, 2012 5:00 AM PT
This story was originally published on March 14, 2012, and is brought to you today as part of our Best of ECT News series.
Now, attorneys general from more than 31 States have accused Google of violating privacy laws because of complaints from users that they were finding ads are popping up on YouTube just after they did a search on Google Maps about the same subject.
How Important Is It?
The overwhelming majority of people in the U.S. and EU use Google every day, so the scope of Google's potential privacy issues is huge. The Pew Research Center reported in August 2011 that 92 percent of all adults in the U.S. use a search engine and email every day. Couple that statistic with comScorce's estimate that Google controls 66.2 percent of the U.S. search engine market and 80 percent of the EU search engine market, and it's clear Google accumulates great volumes of personal search data.
Since Google saves users' searches for 18 months in the U.S. and 12 months in the EU, many government officials are leery of the way Google exploits users' privacy and uses that information to generate more ad revenue. And that's just the search engine side.
So, if you are using Gmail, Google will be able to use information it learns through your emails when you do a search on Google's search engine. For example, if you are logged in to Gmail and also entering data on Google's word processing app, you may get advice about the correct spelling of one of your contacts from Gmail or Google+.
What Personal Information Is It Using?
- Anonymous identifier - An anonymous identifier is a random string of characters that used for the same purposes as a cookie on platforms, including certain mobile devices, where cookie technology is not available.
- Server logs - As with most websites, Google's servers automatically record the page requests made when you visit its sites. These "server logs" typically include your Web request, Internet Protocol address, browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser.
What Does Google Say?
In January, Google announced consolidation of its privacy policies in its official blog:
As for selling or sharing personal information:
"We don't sell your personal information, nor do we share it externally without your permission except in very limited circumstances like a valid court order.
Comments and Critiques
The Electronic Privacy Information Center (EPIC) filed a Motion to enjoin Google from implementing new ToS [Terms of Service] and Privacy Policies early this month. In February, EPIC filed a Motion for Temporary relief against the Federal Trade Commission (FTC) to enforce Google's March 2011 Agreement Containing Consent Order, which included the FTC's oversight on Google's privacy policies for 20 years. EPIC's Motion came on the heels of the EU's request that Google slow down the implementation of the new ToS and privacy policies.
EPIC's Motion claims that Google's new ToS and privacy policies violate the FTC Consent Order and includes the following claims: Users will no longer be able to keep personal information they provide to use the Google email service for simply that service; Google will be able to combine the user information provided for email with other Google services, including the Google social network service.
In February, CNIL sent a letter to Google CEO Larry Page (as a follow-up to an earlier letter) complaining that Google failed to properly consult EU authorities about the new Google privacy policies and that the
"...preliminary analysis shows that Google's new policy does not meet the requirements of the European Directive of Data Protection (95/46/CE), especially regarding information provided to data subjects."
The CNIL highlighted the significance of Google's penetration in the EU with the following statistics about Google's usage. Google accounts for
- more than 80 percent of the European search engine market;
- around 30 percent of the European smartphone market;
- 40 percent of the global online video market; and
- more than 40 percent of the global online advertisement market.
Google disagrees with EPIC and the EU, but has offered to respond to inquiries from regulators.
Given the market power that generated more than US$38 billion in revenue and $9.7 billion of net income from advertising in 2011, these new privacy policies are surely created to help increase revenue.
There will likely be many challenges in the weeks to come from around the world, and perhaps in courts in the U.S. and EU.