Google faces EU crackdown over privacy violations

January 2012's privacy policy comes under fire.

The EU is considering a "co-ordinated crackdown" on Google after it ignored requests from regulators to delay the imposition of its new privacy policy until they had cleared it for compliance with data protection law.

The policy was announced last January (though it only came into effect in March), and allowed Google to mix personal data from all its subsidiaries, particularly Youtube, which had hitherto been cordoned off. The new internal user profiles this enabled the company to create are of great value to advertisers, but the company also trumpeted the improved experience it could offer users, saying at the time:

Our privacy policies have always allowed us to combine information from different products with your account — effectively using your data to provide you with a better service. However, we’ve been restricted in our ability to combine your YouTube and search histories with other information in your account. Our new privacy policy gets rid of those inconsistencies so we can make more of your information available to you when using Google.

The EU didn't agree, and asked the company to hold off implementation until it had held an investigation on whether it complied with EU data protection law. The probe, which began in mid-March, finally reported back in October, and found that the new policy did indeed breach EU law. The French data protection commission, the CNIL, which led the investigation, had recommended a number of changes, such as easier opt-outs for advertising. But the company insists its policy already complies with EU law.

As a result, the CNIL is organising a co-ordinated response to Google, since, as the head of the commission told the Wall Street Journal on Monday, "we're better armed when we speak with one voice than when each country takes its own steps".

The EU hasn't played the situation brilliantly. The fact that its investigation only reported back in October, over six months after it began, is proof of severe regulatory overreach; and it would have been an unnecessary and unsupportable restraint on Google to have asked it to hold off on what was a major business decision for that entire period.

Nonetheless, Google appears to be continuing a trend amongst Silicon Valley — exemplified by Facebook in its squabble with the Irish data protection commission over facial recognition data — of assuming that the regulations of the countries it operates in don't apply to it. The EU has considerably stricter data protection laws than the US, and while some of them, such as the ill-fated cookie directive, are worthy of being ignored, others provide genuine protection for the consumer.

Google maintains that "we have engaged fully with the CNIL throughout this process and will continue to do so," but the EU's privacy group will vote on whether to take action against the company at the end of February.

Photograph: Getty Images

Alex Hern is a technology reporter for the Guardian. He was formerly staff writer at the New Statesman. You should follow Alex on Twitter.

Photo: Getty
Show Hide image

Like it or hate it, it doesn't matter: Brexit is happening, and we've got to make a success of it

It's time to stop complaining and start campaigning, says Stella Creasy.

A shortage of Marmite, arguments over exporting jam and angry Belgians. And that’s just this month.  As the Canadian trade deal stalls, and the government decides which cottage industry its will pick next as saviour for the nation, the British people are still no clearer getting an answer to what Brexit actually means. And they are also no clearer as to how they can have a say in how that question is answered.

To date there have been three stages to Brexit. The first was ideological: an ever-rising euroscepticism, rooted in a feeling that the costs the compromises working with others require were not comparable to the benefits. It oozed out, almost unnoticed, from its dormant home deep in the Labour left and the Tory right, stoked by Ukip to devastating effect.

The second stage was the campaign of that referendum itself: a focus on immigration over-riding a wider debate about free trade, and underpinned by the tempting and vague claim that, in an unstable, unfair world, control could be taken back. With any deal dependent on the agreement of twenty eight other countries, it has already proved a hollow victory.

For the last few months, these consequences of these two stages have dominated discussion, generating heat, but not light about what happens next. Neither has anything helped to bring back together those who feel their lives are increasingly at the mercy of a political and economic elite and those who fear Britain is retreating from being a world leader to a back water.

Little wonder the analogy most commonly and easily reached for by commentators has been that of a divorce. They speculate our coming separation from our EU partners is going to be messy, combative and rancorous. Trash talk from some - including those in charge of negotiating -  further feeds this perception. That’s why it is time for all sides to push onto Brexit part three: the practical stage. How and when is it actually going to happen?

A more constructive framework to use than marriage is one of a changing business, rather than a changing relationship. Whatever the solid economic benefits of EU membership, the British people decided the social and democratic costs had become too great. So now we must adapt.

Brexit should be as much about innovating in what we make and create as it is about seeking to renew our trading deals with the world. New products must be sought alongside new markets. This doesn’t have to mean cutting corners or cutting jobs, but it does mean being prepared to learn new skills and invest in helping those in industries that are struggling to make this leap to move on. The UK has an incredible and varied set of services and products to offer the world, but will need to focus on what we do well and uniquely here to thrive. This is easier said than done, but can also offer hope. Specialising and skilling up also means we can resist those who want us to jettison hard-won environmental and social protections as an alternative. 

Most accept such a transition will take time. But what is contested is that it will require openness. However, handing the public a done deal - however well mediated - will do little to address the division within our country. Ensuring the best deal in a way that can garner the public support it needs to work requires strong feedback channels. That is why transparency about the government's plans for Brexit is so important. Of course, a balance needs to be struck with the need to protect negotiating positions, but scrutiny by parliament- and by extension the public- will be vital. With so many differing factors at stake and choices to be made, MPs have to be able and willing to bring their constituents into the discussion not just about what Brexit actually entails, but also what kind of country Britain will be during and after the result - and their role in making it happen. 

Those who want to claim the engagement of parliament and the public undermines the referendum result are still in stages one and two of this debate, looking for someone to blame for past injustices, not building a better future for all. Our Marmite may be safe for the moment, but Brexit can’t remain a love it or hate it phenomenon. It’s time for everyone to get practical.