Google Insists Privacy Change Is Legal

Data protection authorities claim Googles privacy policy consolidation violates EU law.

Mobile World Congress Preview: 10 Hot Devices (click image for larger view and for slideshow)
Google has consolidated its privacy policies, as it said it would, despite the concerns of regulators in the U.S., Europe, and Asia.
Alma Whitten, Google director of privacy, product and engineering, said in
a blog post
that the consolidation effort makes it easier to understand the companys privacy policy, enables a better experience for signed-in Google users, and leaves existing privacy controls intact.
Although EU Justice Commissioner Viviane Reding told the BBC that Googles privacy policy consolidation violates data protection laws, Google maintains that its changes are legally compliant.
We are confident that our new simple, clear and transparent privacy policy respects all European data protection laws and principles, a company spokesperson said in an email. It provides all the information required in Articles 10 & 11 of the directive, plus much additional information, and it follows the
guidelines
published by the Article 29 Working Party in 2004.
[ Worried about what Google is doing? Read
Google Privacy Changes: 6 Steps To Take
. ]
NYU Stern School of Business professor Arun Sundararajan says Google is moving in the right direction, but hasnt yet done enough to protect consumers.
On the one hand, I do give Google credit for providing a greater level of transparency about what information they have about their consumers, Sundararajan said in a phone interview. What Google isnt doing enough of is telling us what theyre going to do with this information. Thats a little troubling to me. The policy doesnt say enough about what limits Google will place on this information for advertising purposes. And beyond one small assurance theyve given us [about not sharing personal information], we dont know how much theyre going to share with marketing partners.
Sundararajan says he doesnt see Googles privacy policy consolidation as altering the privacy risks consumers face. I see it as a move where Google is reducing its own risk. But Id like to see them be more forthright in spelling out what they will and wont do with customer data.
Sundararajan suggests that Googles distinction between personally identifiable information and non-personally identifiable information is outdated, given the extent to which non-personally identifiable data can be correlated to identify someone.
Re-identifying people based on their [anonymized] activity data is not hard and its getting increasingly easier, he said.
Sundararajan proposes that companies and regulators adopt
an intent-based approach to privacy
as an alternative to burdensome rules that attempt to define permissible privacy practices.
As he sees it, companies should consider the intention of the customer who provided the data as a guideline for how the customers data can be used. If a customer signs up for an online service with an email address, for example, the company should be able to use that address to contact the customer about the service but not to identify the customer for an activity profile or some other purpose.
If companies start to align the way they use their data with the intent the customer had when providing the information, this will go a long way toward mitigating the privacy risk, he said. There are good-intentioned firms out there that just dont have good guidelines about how to responsibly manage consumer data.
Find out how to move beyond server virtualization to build a more flexible, efficient data center in the new
Private Cloud Blueprint
issue of Network Computing. (Free registration required.)

Last News
▸ Security Problem Growing for Dairy Queen, UPS & Retailers, Back off ◂ Discovered: 23/12/2024 Category: security	▸ Veritabile Defecte de Proiectare a Securitatii in Software -> Top 10 Software Security Design Flaws ◂ Discovered: 23/12/2024 Category: security	▸ Sony, XBox Targeted by DDoS Attacks, Hacktivist Threats ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Google Insists Privacy Change Is Legal