- French privacy authority claims policy is illegal under EU law
- 50 US and European consumer groups say new policy is ‘unfair and unwise’
- Japan claims policy changes may be illegal
- Users scramble to protect sensitive data such as search histories
- Google claims ‘to pause now would cause confusion’
- Will affect all Google account holders AND users of Android phones
By Rob Waugh
Last updated at 1:19 PM on 1st March 2012
CNIL, the French privacy agency in charge of the investigation, said Google’s explanation of how it will use the data was too vague and difficult to understand ‘even for trained privacy professionals.’
A coalition of 50 consumer groups in Europe and the U.S. also sent a letter to Mr Page in a last ditch attempt to make the search giant rethink saying the controversial new policy is ‘unfair and unwise’.
Their condemnation came after concerns from the European Union, Japan and Korea among others that the policy may actually be illegal.
But it came into force at midnight local time across the world regardless, with Google claiming that ‘to pause, would cause confusion’.
Data from 60 of Google’s services will be shared between them – meaning Google account users, owners of Android phones and YouTube viewers will be subjected to even more intrusive ‘personalised’ adverts from now on.
Worried users are trading guides about how to protect sensitive private data such as search histories and the content of emails from Google’s new all-encompassing advertising profiles. Mail Online’s guide can be found here.
The search giant said in a blog post, ‘Our privacy policies have always allowed us to combine information from different products with your account – effectively using your data to provide you with a better service. However, we’ve been restricted in our ability to combine your YouTube and Search histories with other information in your account.’
A British privacy campaigner, Alex Hanff is suing the search giant for a refund on his Android phone, claiming that the changes to how Android data could be used amount to a change in the terms of his contract.
Some Android users claim that they are hardest hit by the policy changes, as they have no way to ‘opt out’ of mobile phone contracts.
‘The changes are a significant infringement of my right to privacy and I do not consent to Google being able to use my data in such a way,’ says Hanff.
OUTCRY AROUND THE WORLD: GOVERNMENTS, PRIVACY GROUPS AND CONSUMERS PROTEST
America’s Electronic Privacy Information Center, a privacy rights group, sued the Federal Trade Commission in a federal court in an effort to force the FTC to exercise its powers and block Google’s privacy changes.
Earlier this week, the French regulatory agency CNIL warned Google CEO Larry Page that the new policy appears to violate the European Union’s strict data-protection rules.
The EU’s Article 29 Working Party said this week, ‘Our preliminary analysis shows that Google’s new policy does not meet the requirements of the European Directive on Data Protection, especially regarding the information provided to data subjects.’
Last week, 36 attorneys general in the U.S. and its territories derided the new policy as an ‘invasion of privacy’ in a letter to Page.
The Japanese government is also to investigate whether the new policy breaches Japan’s privacy laws, according to a report in the Tokyo Times.
South Korea is already investigating whether the new policy, which allows Google to ‘share’ data between 60 of its services to build profiles on its users, violates local laws.
The Japanese government said yesterday it will investigate whether the new policy breaches Japanese privacy laws, according to a report in the Tokyo Times.
The EU’s data protection authorities asked French regulator CNIL to investigate the new policy in January.
‘Our preliminary analysis shows that Google’s new policy does not meet the requirements of the European Directive on Data Protection,’ CNIL said in a letter to Google Chief Executive Larry Page, which was posted on CNIL’s website this week.
The new policy makes it easier for Google to combine the data of one person using different services such as the search engine, YouTube or Gmail if he is logged into his Google account.
That allows Google to create a broader profile of that user and target advertising based on that person’s interests and search history more accurately. Advertising is the main way Google makes its money.
CNIL said data protection authorities in the EU ‘are deeply concerned about the combination of personal data across services,’ adding they had ‘strong doubts about the lawfulness and fairness of such processing.’
GOOGLE’S PRIVACY CHANGES – WHAT THEY WILL MEAN FOR YOU
Why is Google changing its policy?
- Google is combining more than 60 different privacy policies so it will be able to throw all the data it gathers about logged-in users into personal dossiers.
- The information Google learns about you while you enter requests into its search engine can be culled, for instance, to suggest videos to watch when you visit the company’s YouTube site.
- Being able to draw more revealing profiles about its users will help sell advertising – the main source of its $38 billion in annual revenue.
Can I stop Google using my data?
- Not if you’re a registered user of Gmail, Google Plus, YouTube, or other Google products. But you can minimize the data Google gathers. For starters, make sure you aren’t logged into one of Google’s services when you’re using Google’s search engine, watching a YouTube video or perusing pictures on Picasa.
- Google can still track you even when you’re not logged in to one of its services. But the information isn’t quite as revealing because Google doesn’t track you by name, only through a numeric Internet address attached to your computer.
I don’t want to keep using Google. Can I opt out?
- One of the major gripes is that registered Google users aren’t being given an option to consent to, or reject, the changes. In particular, people who bought smartphones running on Google’s Android software, and signed two-year contracts to use the devices, can’t easily avoid the new privacy rules unless they buy a different handset and pay an early-termination penalty.
Vivian Reding, the EU’s Justice Commissioner who oversees the bloc’s data protection rules, said she welcomed CNIL’s letter and called on Google to delay its new policy.
Google argues that combining the data into one profile makes search results more relevant and allows a user to cross-navigate between different services more easily. It says the main purpose of the new policy is to combine the more than 70 different rules for Google’s wide-ranging services into one that is simpler and more readable.
The policy change has horrified privacy advocates and bloggers – tech site ZDNet said that Google would ‘know more about you than your wife does’ and said the policy was ‘Big Brother-ish’.
The European Union working party earlier asked for Google to stop the new policy while the working group investigated whether personal data is protected.
‘We call for a pause to ensure that there can be no misunderstanding about Google’s commitments to information rights of EU citizens.’
‘We wish to check the possible consequences for the protection of the personal data of citizens,’ it said.
‘If you’re signed into Google, we can do things like suggest search queries – or tailor your search results – based on the interests you’ve expressed in Google Plus, Gmail and YouTube,’ Google said a new overview page for its privacy policies.
‘We’ll better understand (what) you’re searching for and get you those results faster.’