Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

UK says Google needs further privacy improvements

A review found that Google has improved privacy protections in its products but more work is needed

Google was praised on Tuesday by the U.K.'s data protection watchdog for strengthening its privacy policies but the agency said the company still needs to improve.

Google has been under scrutiny by the Information Commissioner's Office (ICO) since the company admitted in May 2010 to collecting payload data from unencrypted Wi-Fi networks it was indexing as part of its Street View imagery program.

The ICO said in November 2010 that Google broke the law with the data collection, which in some cases recorded entire e-mails, passwords and URLs. The ICO declined to impose a fine and instead demanded that Google submit to an audit of its privacy polices.

The audit took place last month, the ICO said in a statement. "The audit found that Google has taken action in all of the agreed improvement areas," the agency said. "The ICO has now asked the company to go further to enhance privacy, including ensuring that users are given more information about the privacy aspects of Google products."

Google is training its engineers now on advanced data protection and overall is paying more attention to privacy issues when products are designed, the ICO said.

But Google should also ensure that its products have a so-called "privacy story," used to educate users about products' privacy features. While Google has implemented a "privacy design document" for products, those documents should be checked for accuracy. Also, the core training for engineers should include specific design principles that come from the privacy design document, the ICO said.

A Google spokeswoman contacted in London said the company had no direct comment on the ICO's findings.

Google ignited a firestorm when it said it mistakenly collected traffic passing on unencrypted Wi-Fi routers, including fragments of data transmitted by those routers. The purpose of the data collection, which occurred as its Street View imagery vehicles were cruising streets in many countries, was to improve a geolocation database for location-based mobile applications.

Google, which immediately stopped the data collection, faced investigations in many countries including Germany, the U.S., Spain, South Korea, France and Italy.

Send news tips and comments to jeremy_kirk@idg.com

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Google, ICO
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: Google, government, Regulation, security, data protection
Latest Blog Posts
Whitepapers
  • Keeping up With Ever-Expanding Enterprise Data - 2010 IOUG Database Growth Survey
    A majority of respondents report having performance and budget issues due to exponential data growth. Those companies with the highest rates of data growth, in fact, are eight times more likely than slow-growth sites to be seeing significant increases in their storage budgets. New processes and tools are needed to help organizations take control of the massive volumes of information now moving through their systems. The IOUG survey looked at approaches being taken by organizations to manage their growing data stores, and what still needs to be done.
    Learn more »
  • A whitepaper on Cloud Security
    Articles include: The cloud security checklist; Creating a governance framework for Cloud Security; Hackers, like vendors are embracing the cloud. Are you?; Want government cloud? Rethink security! and more. Read this whitepaper.
    Learn more »
  • Improving Productivity in the Connected Enterprise Through Collaboration
    In the market for collaborative applications, a large convergence is beginning to take hold, and the consumerization of IT is central to this movement. The technologies that people use as consumers are impacting the way employees, customers, and partners want to interact and collaborate at work. People want to take the same technology experiences that are available at home and plug them into their daily work lives. This movement is setting worker expectations as both employees and corporate consumers. Workers need to have the choice and flexibility to consume the applications they want, where they want, and on their preferred device. Read on.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments