Google’s ‘dashboard’ privacy controls are a good start

November 5th, 2009 3:24pm

Google logoGoogle has had several years of tussles now with privacy regulators. Three years ago European data protection commissioners began question what the company was doing with all the personal data it was gleaning from users of its search engine. In the past year, the company has faced outrage - at least in some pockets like Italy, Japan and Switzerland - over Street View, which provides panoramic, eye-level views of every street of major cities around the world.

Earlier this year, a leading privacy group called on the US Federal Trade Commission to consider shutting down Google’s web services until the company could better safeguard personal data. There have been a number of instances where Google Docs, Google Desktop and Gmail have had glitches which made users personal documents visible to others. Continue reading "Google’s ‘dashboard’ privacy controls are a good start"

Googling democracy

May 20th, 2009 4:25pm

Google logoGoogle’s European Zeitgeist event this year has been nicknamed “the Royal one” as it was attended not only by the usual business heavyweights like Vivendi’s Jean-Bernard Lévy and Richard Branson but by Prince Charles of the UK, Crown Prince Haakon of Norway and Prince Philip of Spain.

The presence of royalty is not as strange as it might initially seem. Much of Zeitgeist revolves around discussions on how to save the planet, and this is a project that many otherwise under-employed European royals have embraced.

Perhaps these aristocrats also see a kindred spirit in Google, the king of the internet. Oh if only it weren’t for those tedious elected governments, those dull regulations, how much easier it would be to make the world work better. Continue reading "Googling democracy"

Phorm controversy sparks up again

April 28th, 2009 7:19pm

Phorm logoFor a little while it looked like things were looking up for Phorm, the internet advertising technology company. There had been a year of controversy about the company’s technology which monitors internet users web surfing behaviour at the ISP level - a technique known as “deep packet inspection”, which has raised accusations of spying with some privacy activists.

But at the beginning of the year, things went quiet.  There were a few positive statements about targeted advertising from UK officials like Stephen Carter, and the company launched a trial with KT, the Korean broadband provider.

Now, suddenly, the controversy is raging again. Continue reading "Phorm controversy sparks up again"

Facebook puts terms of service up for a vote

April 17th, 2009 2:10am

Responding to concerns that it was invading users’ privacy and taking ownership of their content, Facebook will let its members choose what terms of service govern the popular social networking site.

Starting today, users will have a week to vote between two sets of documents: a revised version of the terms of use released in February that incorporates user feedback and clarifies language about Facebook’s relationship to content posted on the site, or the existing terms of use that still include controversial language. Continue reading "Facebook puts terms of service up for a vote"

UK government considers monitoring social networking sites

March 25th, 2009 5:49pm

spying

Privacy activists have had a busy few weeks. First there was Google’s announcement that it would start using behavioural targeting for its display advertising, which had them up in arms. The following week Google launched Street View, the controversial 3D mapping feature, in the UK, again drawing protest. The latest concern is over revelations that the UKgovernment is thinking of monitoring social networking sites like Facebook, MySpace and Bebo as part of its anti-terrorism measures.

 

There is already an EU directive on monitoring emails and internet usage, requiring internet service providers to store traffic data for 12 months. Since the July 2005 the UK government has been keen to broaden the scope of the ways it can monitor for terrorists. This latest proposal is to extend this to social networking sites, which have become hugely popular after the proposals were first formulated.

  Continue reading "UK government considers monitoring social networking sites"

Indiscreet Tweets

March 3rd, 2009 7:46pm

On Twitter, some tweets are serious leaks. Take the case of Live Search.

Rumours about Microsoft’s rebranding of Live Search, the search engine it hopes will one day rival Google, have swirled in technology circles for months.

Last weekend those rumours seemed confirmed, when LiveSide.net published a screenshot from Twitter that appeared to be from an overenthusiastic Microsoft insider: “Played today with Live search upcoming (to be rebranded) launch pre-beta. I like the new features and UX so far.” (Today the rumours were confirmed by the company.) Continue reading "Indiscreet Tweets"

Facebook retreats after latest privacy row

February 19th, 2009 12:23am

Facebook is always walking on eggshells when privacy is concerned. Last year it came under fire for storing user information after an account was deleted.  In 2007, it revised its Beacon service, which shared users’ activity on other sites with their Facebook friends. Now Facebook is facing allegations that it is trying to take ownership of users’ content.

The latest row occurred after the blog Consumerist called attention to minor but potentially wide-reaching changes to Facebook’s so-called terms of service (TOS), the set of rules users tacitly agree to when using the site. Continue reading "Facebook retreats after latest privacy row"

Street View needs to watch the signs

August 1st, 2008 5:15pm

Of all the schemes Google has dreamt up over the years, Street View has got to be one of the most controversial.

For those not familiar with the idea, Google are taking photos of every street in pretty much the whole world, and integrating it with Google Maps. Naturally, several privacy groups are up in arms at the idea, even though Google have agreed to blur faces and remove people if they request it.

But blurring isn’t Google’s only problem. In what may become a test case, a couple in Pennsylvania are suing Google for publishing pictures of their house, as it is on a private road.

In a statement to court, Google said complete privacy does not exist, but have since said that their remarks have been taken out of context. Google clarified this to me in the following statement:

“There’s been some misinterpretation concerning our response to the Street View suit… It should not be interpreted as a blanket statement on our views towards privacy. To be clear, Google respects an individual’s right to privacy. We have privacy protections built into all of our products. For example, we blur faces in Street View and we offer easy-to-use removal tools so users can decide for themselves whether or not they want a given image to appear in Street View. It is unfortunate the parties involved opted to pursue litigation instead of making use of these tools.”

This problem will be far greater for Street View in the UK due to the very high number of private roads. There are around 40,000 in the UK, according to Private Roads Services. Although it’s hard to quantify the number of public roads in the UK, I estimate there are around 100,000 streets in London (according to a quick calculation counting the entries in the London street atlas).

Google said its policy was to not photograph private roads, and that its drivers were trained to look out for them. Which I think means not driving past a sign saying “private road”. But a spokesman admitted that mistakes have been made, and they would be more careful in future. “We made the error of photographing the approach road to a military base in the US,” said the spokesman. “We learnt from that.”

Phorm and Google: the yin and yang of online privacy

April 8th, 2008 7:34pm

It has been a week of regulatory decisions on internet privacy issues.

The UK’s Office of the Information Commissioner has given the go-ahead for Phorm, the targeted advertising company to start trials with BT. While the ICO statement of this is not exactly a ringing endorsement of the service, it doesn’t raise any insurmountable concerns. Phorm is still under close scrutiny, but for now, allowed to go ahead.

At the same time, the Article 29 Working Party has finally published its opinion on data protection issues related to search engines, going much further than some observers expected. Search engines are to be required to delete search logs after only six months compared with 18 currently for Google and 13 for Microsoft and Yahoo.

There is still much puzzling over the exact interpretation of the dense document, but under some of the strictest readings it suggests that even the search terms you type into a search engine are personal information and should not be used without your permission for other purposes. In other words, they shouldn’t be used to send you targeted ads, an interpretation that would entirely undermine Google’s business model.

It seems unlikely that the rules will be taken to this extreme, but it is clear there is a clash coming between Google and the European regulators on the recommendations. Google maintains it needs server logs for 18 months – some European regulators say even 6 months are too much. After a year and a half of talking, neither side has convinced the other. It doesn’t bode well for finding a compromise from here.

The Phorm and Google cases show that regulators have fallen out of sync with public opinion on these matters. For internet users, Phorm is the easier to hate, because noone really likes advertising. Google, on the other hand, provides a useful service and is forgiven for much.

The regulators, however, appear to see Google as the more problematic of the two. It is OK to target people with ads as long as it is done anonymously, without identifying people. What is not OK is having a lot of personal details sitting on company servers, however unobtrusively they may have been collected and used.

Phorming opinions about targeted ads

March 20th, 2008 6:23pm

Phorm logoAny company hoping to launch targeted advertising services should be watching the fate of UK start-up Phorm with great interest. In particular, they should take note of what this says about the public’s double standards on privacy.

Phorm is trying to build a new ad platform, serving ads targeted around users’ internet habits and interests. It is hoping to make this acceptable to the general public with reassurances that no personally identifiable information is kept or stored as part of the process.

According to Phorm, the system will know it is serving an ad to a 30-35 year old male looking for a new car insurance deal. It will not know who you are, however.  You are just a random number. It will not even keep your IP address.

Phorm has consulted with every possible stakeholder to assure people the system is privacy-friendly - like the UK Home Office and the UK Information Commissioner - and it has had its privacy system audited by Ernst & Young and 80/20 Thinking, a privacy consultancy. It is inviting anyone with an interest to do their own inspection.

But none of this has really helped with public perception. There has been a blogosphere furore, and Phorm has been branded a spyware company in the press. A UK think tank this week sent an open letter to the Information Commissioner’s office, asserting that Phorm was possibly illegal.

As was seen in Facebook’s Beacon experiment, people are strongly against the idea of targeted advertising. Given any choice in the matter, it seems, they will campaign hard against it.

The attitude is, however, inconsistent with our tolerance for all kinds of other, less overt data collection and targeting. Where people are not explicitly told about targeting they are generally too lazy to protest.

Every Google search is stored for 18 months, complete with IP address and cookie information from a personal computer. There is much more of a profile kept on Google’s servers than on Phorm, yet, even after the issue was raised a year and a half ago by European privacy regulators as a problem, users have not abandoned the search engine in droves. It appears to be too convenient to boycott.

Millions of us carry store loyalty cards that allow supermarkets to closely profile our shopping habits. This is linked to our name and address – but that doesn’t bother any more than a handful of people.

In fact, we hand over our personal information constantly to any number of companies, from signing end-user licensing agreements to use software, to filling in forms to extend warranties on our household goods.

The companies to which we give this data use it for their own targeting – and are notoriously bad at protecting it. Several recent studies have shown that only a minority of companies have adequate data safeguards. Many don’t even know what data they have in their files and couldn’t say if any of it had leaked or been hacked. Big data losses such as the TJX incident are just the tip of the iceberg.

This is not causing major uproar.  However, if a company declares its intention to target us, albeit in as secure a way as possible, we feel outrage. Phorm is in danger of becoming a scapegoat for a general frustration about an information society we no longer feel in control of.

It is a shame, because the company was at least trying to move privacy technology forward to some extent. It may not have gone far enough, but it is a start. Stamping the business out before it has even started will not stop attempts to target advertising, but may simply drive it underground. The lesson from all this seems to be:  if you want to target, just don’t tell anyone you are doing it. They probably won’t notice.