Saturday, April 6, 2013

Google Agrees to Educate Consumers About Privacy in Street View Settlement


Last month, Google agreed to a settlement with 38 state attorneys general in a case they brought over privacy violations committed by Google during the course of its Street View data collection. Google’s street mapping cars (apparently inadvertently) collected e-mail addresses, passwords, and other personal information from the unsecured home networks of unsuspecting computer users.

Google is paying a $7 million fine, to be divided among the states involved in the settlement. But more interestingly for our purposes, Google has also agreed to some privacy initiatives that are unlike those we’ve seen before in the context of FTC consent decrees (the FTC apparently ended its investigation of the Street View issue without imposing a fine). The settlement requires Google to conduct more robust privacy training for its employees and to create and promote a public service announcement instructing consumers on the importance of securing home Wi-Fi networks.


Consumer groups are (predictably) unimpressed by the idea of having Google educate its users about privacy. But on the other hand, maybe there's some wisdom in requiring (or encouraging) companies like Google and Facebook that collect large amounts of consumer data online to educate consumers about data privacy. Consumers clearly are willing to trust these companies with their personal information; perhaps they would also take notice if these companies encouraged users to take privacy more seriously. In order for the notice-and-choice model to be even reasonably effective at permitting consumers to balance their competing desires for privacy and services, consumers need to be well informed about the trade-offs and how to go about preserving the amount of privacy they want. To the extent that Google's privacy education campaign helps consumers get some of that information, it could be a positive development and a useful new tool for privacy regulators.

1 comment:

  1. This is very interesting Lisa, I wonder how much this would actually affect cyber-security. My point is that GOOGLE is offering security advice concerning "securing wifi" which has little to do with what GOOGLE was being sued for in the first place. (I like to think that this situation is like asking a person who litters, to tell kids not to smoke because people throw cigarettes on the ground...basically the penalty does not necessary fit the crime.)
    I like the overall, concept that companies like Google setting up privacy seminars for the public, whether it is to explain what and why Google acts; or have Google explain ways that users may act or fix some of their personal privacy concerns.

    ReplyDelete