Google faces EU crackdown over privacy violations

January 2012's privacy policy comes under fire.

The EU is considering a "co-ordinated crackdown" on Google after it ignored requests from regulators to delay the imposition of its new privacy policy until they had cleared it for compliance with data protection law.

The policy was announced last January (though it only came into effect in March), and allowed Google to mix personal data from all its subsidiaries, particularly Youtube, which had hitherto been cordoned off. The new internal user profiles this enabled the company to create are of great value to advertisers, but the company also trumpeted the improved experience it could offer users, saying at the time:

Our privacy policies have always allowed us to combine information from different products with your account — effectively using your data to provide you with a better service. However, we’ve been restricted in our ability to combine your YouTube and search histories with other information in your account. Our new privacy policy gets rid of those inconsistencies so we can make more of your information available to you when using Google.

The EU didn't agree, and asked the company to hold off implementation until it had held an investigation on whether it complied with EU data protection law. The probe, which began in mid-March, finally reported back in October, and found that the new policy did indeed breach EU law. The French data protection commission, the CNIL, which led the investigation, had recommended a number of changes, such as easier opt-outs for advertising. But the company insists its policy already complies with EU law.

As a result, the CNIL is organising a co-ordinated response to Google, since, as the head of the commission told the Wall Street Journal on Monday, "we're better armed when we speak with one voice than when each country takes its own steps".

The EU hasn't played the situation brilliantly. The fact that its investigation only reported back in October, over six months after it began, is proof of severe regulatory overreach; and it would have been an unnecessary and unsupportable restraint on Google to have asked it to hold off on what was a major business decision for that entire period.

Nonetheless, Google appears to be continuing a trend amongst Silicon Valley — exemplified by Facebook in its squabble with the Irish data protection commission over facial recognition data — of assuming that the regulations of the countries it operates in don't apply to it. The EU has considerably stricter data protection laws than the US, and while some of them, such as the ill-fated cookie directive, are worthy of being ignored, others provide genuine protection for the consumer.

Google maintains that "we have engaged fully with the CNIL throughout this process and will continue to do so," but the EU's privacy group will vote on whether to take action against the company at the end of February.

Photograph: Getty Images

Alex Hern is a technology reporter for the Guardian. He was formerly staff writer at the New Statesman. You should follow Alex on Twitter.

Picture: ANDRÉ CARRILHO
Show Hide image

Leader: Boris Johnson, a liar and a charlatan

The Foreign Secretary demeans a great office of state with his carelessness and posturing. 

Boris Johnson is a liar, a charlatan and a narcissist. In 1988, when he was a reporter at the Times, he fabricated a quotation from his godfather, an eminent historian, which duly appeared in a news story on the front page. He was sacked. (We might pause here to acknowledge the advantage to a young journalist of having a godfather whose opinions were deemed worthy of appearing in a national newspaper.) Three decades later, his character has not improved.

On 17 September, Mr Johnson wrote a lengthy, hyperbolic article for the Daily Telegraph laying out his “vision” for Brexit – in terms calculated to provoke and undermine the Prime Minister (who was scheduled to give a speech on Brexit in Florence, Italy, as we went to press). Extracts of his “article”, which reads more like a speech, appeared while a terror suspect was on the loose and the country’s threat level was at “critical”, leading the Scottish Conservative leader, Ruth Davidson, to remark: “On the day of a terror attack where Britons were maimed, just hours after the threat level is raised, our only thoughts should be on service.”

Three other facets of this story are noteworthy. First, the article was published alongside other pieces echoing and praising its conclusions, indicating that the Telegraph is now operating as a subsidiary of the Johnson for PM campaign. Second, Theresa May did not respond by immediately sacking her disloyal Foreign Secretary – a measure of how much the botched election campaign has weakened her authority. Finally, it is remarkable that Mr Johnson’s article repeated the most egregious – and most effective – lie of the EU referendum campaign. “Once we have settled our accounts, we will take back control of roughly £350m per week,” the Foreign Secretary claimed. “It would be a fine thing, as many of us have pointed out, if a lot of that money went on the NHS.”

This was the promise of Brexit laid out by the official Vote Leave team: we send £350m to Brussels, and after leaving the EU, that money can be spent on public services. Yet the £350m figure includes the rebate secured by Margaret Thatcher – so just under a third of the sum never leaves the country. Also, any plausible deal will involve paying significant amounts to the EU budget in return for continued participation in science and security agreements. To continue to invoke this figure is shameless. That is not a partisan sentiment: the head of the UK Statistics Authority, Sir David Norgrove, denounced Mr Johnson’s “clear misuse of official statistics”.

In the days that followed, the chief strategist of Vote Leave, Dominic Cummings – who, as Simon Heffer writes in this week's New Statesman, is widely suspected of involvement in Mr Johnson’s article – added his voice. Brexit was a “shambles” so far, he claimed, because of the ineptitude of the civil service and the government’s decision to invoke Article 50 before outlining its own detailed demands.

There is a fine Yiddish word to describe this – chutzpah. Mr Johnson, like all the other senior members of Vote Leave in parliament, voted to trigger Article 50 in March. If he and his allies had concerns about this process, the time to speak up was then.

It has been clear for some time that Mr Johnson has no ideological attachment to Brexit. (During the referendum campaign, he wrote articles arguing both the Leave and Remain case, before deciding which one to publish – in the Telegraph, naturally.) However, every day brings fresh evidence that he and his allies are not interested in the tough, detailed negotiations required for such an epic undertaking. They will brush aside any concerns about our readiness for such a huge challenge by insisting that Brexit would be a success if only they were in charge of it.

This is unlikely. Constant reports emerge of how lightly Mr Johnson treats his current role. At a summit aiming to tackle the grotesque humanitarian crisis in Yemen, he is said to have astounded diplomats by joking: “With friends like these, who needs Yemenis?” The Foreign Secretary demeans a great office of state with his carelessness and posturing. By extension, he demeans our politics. 

This article first appeared in the 21 September 2017 issue of the New Statesman, The revenge of the left