News: 1652947030

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Google's first report on Privacy Sandbox hits UK watchdog's inbox

(2022/05/19)


As Google's self-imposed "late 2023" deadline to kill all third party cookies in its Chrome browser looms, the giant has handed in its first quarterly Privacy Sandbox report to the UK's competition regulator.

As a reminder, the Competition Market's Authority (CMA) took exception to Google's Privacy Sandbox cookie cull amid worries on several fronts that the project might shut out competing ad companies in favor of the search giant.

Against a backdrop of added scrutiny from lawmakers and regulators in the US, Europe, and the UK at a time when Google faces broad antitrust scrutiny and litigation, the search giant [1]made a number of commitments to the UK's CMA, one of which was a regular report on progress with its Privacy Sandbox proposals.

[2]

The [3]first quarterly report covering February 11 to May 16 was published this week, and says ING Bank, the Monitoring Trustee, "has not identified any reportable concerns to the CMA."

[4]

[5]

Google's compliance commitments relate to its use of data, discrimination, and circumvention.

[6]Google's FLoC flopped, boffins claim, because it failed to provide promised privacy

[7]Google starts testing fenced frames to guard its Privacy Sandbox

[8]Google resumes shoveling stuff into its 'Privacy Sandbox'

[9]Google expands Privacy Sandbox to Android

The report, [10]a 20-page PDF , details how Google is taking account of third-party observations, provides timing updates, and summarizes interactions between the CMA and Google.

The timeline for Q1 2022 includes the addition of the Topics API. As for observations, discussions between the Chrome team and interested parties included questions around API availability for testing and traffic levels.

The testing theme continued into a section headed "Google's Interactions with the CMA". In this the CMA noted stakeholder concerns and a potential lack of understanding regarding functional testing of APIs and a suggestion that Google's Ads business might: "benefit from internal testing on the impact of the Privacy Sandbox tools before these are announced to the market."

Awkward. At Chrome summit, developer asks: Why should anyone trust Google? [11]READ MORE

There are plenty of concerns raised from third parties in the doc, including at least five from stakeholders around First Party Sets (FPS), a proposal where multiple domains owned by the same entity – eg google.com, google.co.uk, and youtube.com – would be grouped into sets which "allow related domain names to declare themselves as the same first-party."

These included worries over a common privacy policy requirement and concerns that the Independent Enforcement Entity (IEE) was "likely to receive a large number of challenges of FPS validity." To both issues, Google responded that "Chrome is still defining our policy requirements; and will keep this feedback in mind."

[12]

The report shows Google is complying with the commitments made to the CMA around its Privacy Sandbox. The next report is due in July (along with another from ING Bank) and the CMA remains keen for third parties concerned about the proposals to get in touch. ®

Get our [13]Tech Resources



[1] https://www.theregister.com/2022/02/11/uk_cma_google_cookies_assurances/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YoYVSOwgnglN6UvbRhadBAAAAIo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.gov.uk/cma-cases/investigation-into-googles-privacy-sandbox-browser-changes#googles-quarterly-report

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoYVSOwgnglN6UvbRhadBAAAAIo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YoYVSOwgnglN6UvbRhadBAAAAIo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://www.theregister.com/2022/05/05/googles_floc_flopped_boffins_claim/

[7] https://www.theregister.com/2022/05/03/google_fenced_frames/

[8] https://www.theregister.com/2022/03/29/google_privacy_sandbox/

[9] https://www.theregister.com/2022/02/17/google_privacy_sandbox/

[10] https://assets.publishing.service.gov.uk/media/62835bfee90e071f6af1457e/Privacy_Sandbox_Progress_Report_to_the_CMA_2022_Q1.pdf

[11] https://www.theregister.com/2021/11/08/why_should_anyone_trust_google/

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YoYVSOwgnglN6UvbRhadBAAAAIo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[13] https://whitepapers.theregister.com/



The Commandments of the EE:

(9) Trifle thee not with radioactive tubes and substances lest thou
commence to glow in the dark like a lightning bug, and thy wife be
frustrated and have not further use for thee except for thy wages.
(10) Commit thou to memory all the words of the prophets which are
written down in thy Bible which is the National Electrical Code,
and giveth out with the straight dope and consoleth thee when
thou hast suffered a ream job by the chief electrician.
(11) When thou muckest about with a device in an unthinking and/or
unknowing manner, thou shalt keep one hand in thy pocket. Better
that thou shouldest keep both hands in thy pockets than
experimentally determine the electrical potential of an
innocent-seeming device.