suntimes
SOGGY 
Weather Updates

EU regulators ask Google to change privacy policy

PARIS — European regulators have asked Google to clarify its new privacy policy and make it easier for users to opt out of it because of concerns that the web giant may be collecting too much data and holding it for too long.

France’s data protection agency led a European investigation into Google’s new unified privacy policy, which replaces individual policies for its search, email and other services, and regulates how it uses the personal data it collects. The policy allows Google to combine data collected from one person using its disparate services, from Gmail to YouTube.

That gives Google a powerful tool for targeting the user with advertising based on his or her interests and search history. Advertising is the main way the company makes its money.

The collection of data is not just limited to people with accounts to Google applications. The web giant can collect information from anyone who visits a website that has a link to its services — for example, a Google map posting. The commission said that of the top 500 most-visited sites in France, 90 percent had a link with Google.

With that kind of power, comes responsibility, the commission said.

It outlined three main concerns about the new policy: it’s not clear enough in explaining to users what data is collected and how it will be used; it’s too difficult for users to opt out of data collection and combination; and Google doesn’t always say how long it will hold onto data.

The commission also noted that, under the new policy, Google doesn’t differentiate between data collected, so a search term and a credit card number are treated the same and can be used for any purpose stated in the policy.

Regulators want Google to flesh out the vague parts of its policy, tailor the way it uses data to the kind of data collected and, in general, make it easier for users to wriggle out of the wide net it has cast.

In one example cited, regulators said that in order to opt out of targeted advertising, users have to take six actions — and that’s just one part of Google’s universe that the privacy policy touches.

All of these concerns and suggestions were sent to Google in a letter Tuesday, although the findings were presented to Google representatives last month. Data protection authorities in all 27 European Union countries signed the letter.

Google’s global privacy counsel, Peter Fleischer, said the company is reviewing the commission’s report but believes its policy respects European law.

Isabelle Falque-Pierrotin, president of the French National Commission on Computing and Freedom, said that Google would have three to four months to respond but that there wasn’t a firm deadline.

“We haven’t asked Google to go back to its old policy,” she told reporters. “We’ve asked it to complete and clarify it on a certain number of points.”

If it fails to comply, she said regulators could move into a more “contentious phase” — but wasn’t clear on exactly what that would entail. Data regulators in many of the countries represented have the power to fine companies, but the response would vary by country.

Falque-Pierrotin said she expected there to be a dialogue between the commission and Google, although she chided the company for responding vaguely to many of the questions asked during the investigation. In fact, the report occasionally says it’s unclear exactly what Google’s privacy policy is — and asks the company to state that it respects the broad principles of privacy protection, like minimizing the amount of data collected, using it for narrow purposes and protecting the user’s right to object.

“You have to understand the approach of the data protection authorities: It’s not to make war with Google and to stop all innovation,” she said. “It’s to say: You are a dominant actor in the market. You have to take up your responsibilities.”



© 2014 Sun-Times Media, LLC. All rights reserved. This material may not be copied or distributed without permission. For more information about reprints and permissions, visit www.suntimesreprints.com. To order a reprint of this article, click here.