Google fined $42.5m over misleading Android location settings in Australia
(2022/08/12)
- Reference: 1660312809
- News link: https://www.theregister.co.uk/2022/08/12/google_accc_penalty/
- Source link:
Google is being ordered to pay A$60 million ($42.5 million) in penalties to Australia's competition and national consumer law regulator regarding the collection and use of location data on Android phones.
[1]The financial slap on the wrist relates to a period between January 2017 and December 2018 and follows court action by the Australian Competition and Consumer Commission (ACCC).
According to the regulators, Google misled consumers through the "Location History" setting. Some users were told, according to the ACCC, that the setting "was the only Google account setting that affected whether Google collected, kept and used personally identifiable data about their location."
[2]
It was not. Another setting titled "Web & App Activity" also permitted data to be collected by Google. And it allowed the collection of "personally identifiable location data when it was turned on, and that setting was turned on by default," the ACCC said.
[3]
[4]
The "misleading representations," according to the ACCC, breach Australian consumer law and could have been viewed by the users of 1.3 million Google accounts in Australia. The figure is, however, a best estimate. We're sure Google doesn't collect telemetry showing where Android users navigate to either.
Privacy issues aside, the data could also be used by Google to target ads to consumers who thought they'd said no to collection.
[5]
Google "took remedial steps" and addressed the issues by December 20, 2018, but the damage was done and the ACCC instituted proceedings in October 2019. In April 2021, the Federal Court found that Google LLC (the US entity) and Google Australia Pty Ltd had breached Australian consumer law.
[6]Google gets the green light to flood US Gmail inboxes with political spam
[7]Google tells Apple to 'fix text messaging' in bid to promote RCS protocol
[8]Google's bug bounty boss: Finding and patching vulns? 'Totally useless'
[9]South Korean regulator worried Apple, Google, may be working around app store payment choice law
As for that A$60m, it was awarded against Google LLC rather than its subsidiary Google Australia Pty Ltd ("in circumstances where the Australian company was not responsible for the preparation of the screens which the Court found were misleading").
Google was also ordered to ensure "certain staff" were trained in Australian consumer law and pay a contribution to the ACCC's costs.
A Google spokesperson told The Register : "We can confirm that we've agreed to settle the matter concerning historical conduct from 2017-2018. We've invested heavily in making location information simple to manage and easy to understand with industry-first tools like auto-delete controls, while significantly minimizing the amount of data stored. As we've demonstrated, we're committed to making ongoing updates that give users control and transparency, while providing the most helpful products possible."
Google has come under fire from other quarters regarding the obtaining of customer location data without proper consent. A group of US states [10]sued the search giant earlier this year over "dark patterns" in the user interface to get hold of location information. Then there was the whole creepy [11]Street View Wi-Fi harvesting debacle .
[12]
As for the penalty order, ACCC Chair Gina Cass-Gottlieb said: "Companies need to be transparent about the types of data that they are collecting and how the data is collected and may be used, so that consumers can make informed decisions about who they share that data with." ®
Get our [13]Tech Resources
[1] https://www.accc.gov.au/media-release/google-llc-to-pay-60-million-for-misleading-representations
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/08/11/google_political_spam/
[7] https://www.theregister.com/2022/08/10/google_tells_apple_to_fix/
[8] https://www.theregister.com/2022/08/10/google_bug_bounty_boss/
[9] https://www.theregister.com/2022/08/10/apple_google_south_korea_investigation/
[10] https://www.theregister.com/2022/01/24/google_sued_location_states_dc/
[11] https://www.theregister.com/2017/11/22/google_oracle_location_privacy/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
[1]The financial slap on the wrist relates to a period between January 2017 and December 2018 and follows court action by the Australian Competition and Consumer Commission (ACCC).
According to the regulators, Google misled consumers through the "Location History" setting. Some users were told, according to the ACCC, that the setting "was the only Google account setting that affected whether Google collected, kept and used personally identifiable data about their location."
[2]
It was not. Another setting titled "Web & App Activity" also permitted data to be collected by Google. And it allowed the collection of "personally identifiable location data when it was turned on, and that setting was turned on by default," the ACCC said.
[3]
[4]
The "misleading representations," according to the ACCC, breach Australian consumer law and could have been viewed by the users of 1.3 million Google accounts in Australia. The figure is, however, a best estimate. We're sure Google doesn't collect telemetry showing where Android users navigate to either.
Privacy issues aside, the data could also be used by Google to target ads to consumers who thought they'd said no to collection.
[5]
Google "took remedial steps" and addressed the issues by December 20, 2018, but the damage was done and the ACCC instituted proceedings in October 2019. In April 2021, the Federal Court found that Google LLC (the US entity) and Google Australia Pty Ltd had breached Australian consumer law.
[6]Google gets the green light to flood US Gmail inboxes with political spam
[7]Google tells Apple to 'fix text messaging' in bid to promote RCS protocol
[8]Google's bug bounty boss: Finding and patching vulns? 'Totally useless'
[9]South Korean regulator worried Apple, Google, may be working around app store payment choice law
As for that A$60m, it was awarded against Google LLC rather than its subsidiary Google Australia Pty Ltd ("in circumstances where the Australian company was not responsible for the preparation of the screens which the Court found were misleading").
Google was also ordered to ensure "certain staff" were trained in Australian consumer law and pay a contribution to the ACCC's costs.
A Google spokesperson told The Register : "We can confirm that we've agreed to settle the matter concerning historical conduct from 2017-2018. We've invested heavily in making location information simple to manage and easy to understand with industry-first tools like auto-delete controls, while significantly minimizing the amount of data stored. As we've demonstrated, we're committed to making ongoing updates that give users control and transparency, while providing the most helpful products possible."
Google has come under fire from other quarters regarding the obtaining of customer location data without proper consent. A group of US states [10]sued the search giant earlier this year over "dark patterns" in the user interface to get hold of location information. Then there was the whole creepy [11]Street View Wi-Fi harvesting debacle .
[12]
As for the penalty order, ACCC Chair Gina Cass-Gottlieb said: "Companies need to be transparent about the types of data that they are collecting and how the data is collected and may be used, so that consumers can make informed decisions about who they share that data with." ®
Get our [13]Tech Resources
[1] https://www.accc.gov.au/media-release/google-llc-to-pay-60-million-for-misleading-representations
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/08/11/google_political_spam/
[7] https://www.theregister.com/2022/08/10/google_tells_apple_to_fix/
[8] https://www.theregister.com/2022/08/10/google_bug_bounty_boss/
[9] https://www.theregister.com/2022/08/10/apple_google_south_korea_investigation/
[10] https://www.theregister.com/2022/01/24/google_sued_location_states_dc/
[11] https://www.theregister.com/2017/11/22/google_oracle_location_privacy/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvZ5IrTHWtirb@Gv3EHyjQAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
Cost of doing business
elsergiovolador
Australian should really look how much profit Google made before and after the change and then slap 100% tax on that amount + penalty for a good measure.
Google's defence.
TeeCee
"Haven't you collected too much data here?"
"Nah mate, we can't even tell what it is yet.".
I noticed Google have made up a new location service
Dan 55
This new one is called earthquake alerts, and as you're opted in by default you might want to disable that one as well.
"Google is being ordered to pay A$60 million"
Coffee money once more.
It's unfortunate that [a] privacy regulators preferentially pursue behemoth infringers but mostly ignore the vast groundswell of general abuse, and [b] the penalties applied to the behemoths are so utterly trivial that they don't drive any change of behaviour.
The net result is good PR for the regulators while the abusers proceed on their merry way as if nothing had changed. However it jibes with a common position (at least here in the UK) of government departments when they propose legislation - "to demonstrate that we take [whatever] seriously". PR again and always PR - the legislation doesn't have to actually protect anyone.