Privacy groups criticize proposed $8.5 million Google settlement

The money is meant for organizations who must use it to help protect privacy on the Internet

Five U.S. privacy groups have opposed a proposed US$8.5 million settlement with Google in a class action lawsuit over search privacy, as it fails to require Google to change its business practices, they said.

Google was sued in October 2010 in the U.S. District Court for the Northern District of California. The Internet giant allegedly transmitted user search queries to third parties without their knowledge or consent in order to enhance advertising revenue and profitability. Google shares search queries "via referrer headers," according to a court document.

The headers identify the address of a Web page that linked to the current page. When a Google user clicks on a link from Google's search results page, the owner of the website that the user clicks on will receive from Google the user's search terms in the referrer header because the search terms are included in the URL.

The search terms can contain users' real names, street addresses, phone numbers, credit card numbers and social security numbers, all of which increases the risk of identity theft, according to the original complaint. Those queries can also contain highly-personal and sensitive issues, such as confidential medical information, racial or ethnic origins, political or religious beliefs or sexuality, according to the complaint.

On Monday, the plaintiffs in the class action lawsuit filed a motion for settlement. Google has agreed to pay $8.5 million in cash into a settlement fund, according to the motion.

The proposed agreement provides for a single settlement class, in this case all persons in the U.S. who submitted a search query to Google at any time from Oct. 25, 2006 until the date of the notice of the proposed class action settlement, according to the document.

The money however will not be divided among all Google users in the U.S., but rather be paid to organizations that can protect the interests of individuals.

Part of the settlement fee is meant to cover settlement administration expenses and part will be paid to the World Privacy Forum, Carnegie-Mellon, Berkman Center for Internet and Society at Harvard University and Stanford Center for Internet and Society among others, according to the document.

The recipients must agree to devote the funds to promote public awareness and education, and/or to support research, development, and initiatives, related to protecting privacy on the Internet, according to the proposed settlement.

Besides a monetary settlement, Google also agreed to notify users as to its conduct so that users can make informed choices about whether and how to use Google search.

But the settlement proposal is not good enough, according to privacy organisations including the Electronic Privacy Information Center, Consumer Watchdog, Patient Privacy Rights, the Center for Digital Democracy and the Privacy Rights Clearinghouse.

In a joint letter sent to Judge Edward J. Davila on Thursday, they urge him not to accept the proposed settlement.

The main problem with the proposal is that it fails to require Google to change its business practices, they said.

"The only change brought about by the proposed settlement is a modification of Google's privacy policy to allow the company to continue the disputed practice," they wrote, adding that privacy notices are widely ineffective because users don't read them. If users read them, it requires considerable sophistication as well as a considerable amount of time. Also, reading a notice typically produces no practical benefit because the terms are pre-determined by the companies and may be changed at any time, the groups added.

"Thus, additional notice will provide no meaningful benefit to the class. To the contrary, the revised notice will essentially ratify the company's continuation of the practice that gave rise to this suit," they said.

The proposed settlement also fails to provide any monetary relief to the class, they wrote. Of the organizations that will benefit from the settlement, with the exception of the World Privacy Forum, none have the protection of privacy as a mission, they added.

"The absence of a benefit to the class combined with the proposed allocation of awards to institutions not aligned with the interests of class members is not accidental," the privacy groups wrote.

"Proposed class counsel, seeking to settle the matter and obtain their fees, have prioritized their own personal financial interests above the interests of the Class. It may serve their interests to have the preliminary settlement approved; it serves the putative Class members not all. For these reasons, the preliminary settlement agreement should be rejected," they added.

The plaintiffs asked Judge Davila to grant preliminary approval of the proposed class action settlement this Friday.

Join the CSO newsletter!

Error: Please check your email address.

Tags Consumer WatchdogGoogleintellectual propertysecuritylegalElectronic Privacy Information CenterprivacyPatient Privacy RightsCenter for Digital Democracy and the Privacy Rights Clearinghouse.

More about Electronic Privacy Information CenterGoogleHarvard UniversityMellon

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Loek Essers

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts

Market Place