PI responds to Google's Wifi grab

14/05/2010

In its company blog Google today revealed that a "mistake" has resulted in WiFi content data (payload data) being collected worldwide by StreetView cars since 2007. This allegedly random error resulted in sensitive personal information over insecure WiFi being collected and stored by the cars.

While we acknowledge the positive element of the company admitting this astonishing invasion of privacy, the incident raises a number of deeply troubling questions.

• Why was Google developing code to sniff payload data?
• How was it possible to integrate such code into software that was not specifically designed to manage such data?
• Why was there no thorough audit of the code prior to deployment?
• How is it that no-one noticed the substantial additional volume of collected data when a storage estimate must have been calculated in advance of collection?

Privacy International has argued for some years that Google must radically improve its procedures to ensure that privacy of its users and of the general population is protected. This latest incident establishes that the company has a long distance to travel before such a condition is met. This latest incident was not caused by a mistake; it was caused by a failure of process that cuts across the entire company.

In the absence of a systemic change in product development and deployment procedures the latest incident will be just one in a continuing litany of transgressions on personal privacy. The public would be right to treat assurances by Google with scepticism until the company reforms its practices and becomes more accountable and responsible. This is a cockup that makes even the most unconcerned wonder if they could ever believe a company claim ever again?

Related:
UK Police begin investigation into Google Wi-Fi grab
An Interview with Google on Government Access to Personal Information
RC: Secret leaked document reveals what Google "really" thinks about privacy (PDF)
RC: The Google Toilet (external video)
RC: Onion on Google creating an Opt Out Village (external video)
An open letter to EU privacy commissioners regarding deletion of Google WiFi data