{"id":1204,"date":"2012-02-27T09:34:24","date_gmt":"2012-02-27T17:34:24","guid":{"rendered":"\/?p=1204"},"modified":"2012-05-30T15:04:43","modified_gmt":"2012-05-30T23:04:43","slug":"attorneys-general-swarm-google","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1204","title":{"rendered":"Attorneys General swarm Google"},"content":{"rendered":"<p>By now everyone\u00a0has seen the\u00a0&#8220;this stuff matters&#8221;\u00a0box on Google&#39;s search page.\u00a0 \u00a0The &#8220;This stuff matters&#8221; message is pretty interesting &#8211; it sounds like Google understands our concerns and is taking them seriously.\u00a0 On that basis I expect many people &#8211; fearing another 80 page privacy policy &#8211; will just move on to get their search result.<\/p>\n<p><img loading=\"lazy\" style=\"margin-top: 10px; margin-bottom: 10px;\" src=\"\/wp-content\/images\/2011\/07\/attorneysgeneralgoogle_1A.jpg\" alt=\"Google has its way with us\" width=\"594\" height=\"392\" \/><\/p>\n<p>But some will actually take the time to follow the link.\u00a0 And what they&#39;ll see actually <em>is<\/em> important.<\/p>\n<p>First, they&#39;ll find out that beginning this Thursday Google will amalgamate all the information it has about their activities and postings on all\u00a0of Google&#39;s sites and services into a single account profile.\u00a0 This in spite of the fact that most people put content on those sites\u00a0and entered\u00a0queries into\u00a0Google search pages\u00a0thinking\u00a0the information\u00a0was limited to\u00a0the specific context in which they were participating.<\/p>\n<p>Second, they&#39;ll find out\u00a0that as customers they have no choice about the matter.\u00a0 Even though in many cases they have helped create the knowledge and content that makes Google successful, their option if they dislike the policy is to completely stop using Google sites by Wednesday February 29th 2012.\u00a0<\/p>\n<p>Of course\u00a0all of this is perfectly in keeping with the creepy &#8220;Real Names&#8221; initiative\u00a0forced upon\u00a0us a few months ago.\u00a0 At that time, we were told &#8220;Real Names&#8221; only applied to &#8220;certain Google sites&#8221;\u00a0&#8211; like Google+.\u00a0\u00a0What a surprise that so little time later,\u00a0ALL\u00a0account and profile information from ALL\u00a0Google properties is being amalgamated under a single privacy and identity policy!\u00a0\u00a0As we predicted, Real Names\u00a0is slithering into the whole fabric of\u00a0the company&#39;s offerings, whether specific sites benefit from what will often be &#8220;over-identification&#8221; or not.<\/p>\n<p>Happily, one group of people who actually bothered to\u00a0look into the change\u00a0were the Attorneys General of the United States.\u00a0 Today they published <a href=\"http:\/\/www.attorneygeneral.gov\/uploadedFiles\/Press\/AG-Google-Privacy-Policy-Letter.pdf\" class=\"broken_link\">a cogent and devastating letter<\/a> that does an\u00a0admirable job of enumerating the many\u00a0deeply disturbing implications of Google&#39;s latest identity initiative.\u00a0 It begins,<\/p>\n<blockquote><p>&#8220;Google\u2019s new privacy policy is troubling for a number of reasons. On a fundamental level, the policy appears to invade consumer privacy by automatically sharing personal information consumers input into one Google product with all Google products. Consumers have diverse interests and concerns, and may want the information in their Web History to be kept separate from the information they exchange via Gmail. Likewise, consumers may be comfortable with Google knowing their Search queries but not with it knowing their whereabouts, yet the new privacy policy appears to give them no choice in the matter, further invading their privacy. It rings hollow to call their ability to exit the Google products ecosystem a \u201cchoice\u201d in an Internet economy where the clear majority of all Internet users use \u2013 and frequently rely on \u2013 at least one Google product on a regular basis.&#8221;<\/p><\/blockquote>\n<p>The\u00a0Attorneys General\u00a0then go on to discuss the\u00a0contagion between Google&#39;s\u00a0consumer offerings and their\u00a0enterprise ones&#8230;\u00a0\u00a0What does\u00a0this kind of\u00a0identity grab mean for companies and governments who have put corporate and state information\u00a0under Google&#39;s stewardship?\u00a0 Can\u00a0the\u00a0companies who steward the resources\u00a0of the World\u00a0Wide Web change their privacy and other policies in radical and\u00a0even maniacal ways without regard to the policies in effect when those resources were created?\u00a0\u00a0\u00a0Can they\u00a0simply tell those who have bought into previous promises to\u00a0either accept their brave new world or &#8220;take a walk&#8221;?\u00a0 As the attorneys put it,<\/p>\n<blockquote><p>&#8220;This invasion of privacy will be costly for many users to escape. For users who rely on Google products for their business \u2013 a use that Google has actively promoted1 \u2013 avoiding this information sharing may mean moving their entire business over to different platforms, reprinting any business cards or letterhead that contained Gmail addresses, re-training employees on web-based sharing and calendar services, and more. The problem is compounded for the many federal, state, and local government agencies that have transitioned to Google Apps for Government at the encouragement of your company, and that now will need to spend taxpayer dollars determining how this change affects the security of their information and whether they need to switch to different platforms.&#8221;<\/p><\/blockquote>\n<p>I urge everyone to <a href=\"http:\/\/www.attorneygeneral.gov\/uploadedFiles\/Press\/AG-Google-Privacy-Policy-Letter.pdf\" class=\"broken_link\">read the letter in full<\/a>\u00a0and think deeply about the consequences.\u00a0\u00a0<\/p>\n<p>Not long ago, <a href=\"http:\/\/zdnet.com\/blog\/identity\">John Fontana<\/a> suggested we get together to discuss\u00a0the\u00a0degree to which\u00a0the <a href=\"https:\/\/www.identityblog.com\/stories\/2005\/05\/13\/TheLawsOfIdentity.pdf\">Laws of Identity <\/a>remain relevant seven years after they were published.\u00a0\u00a0I look forward to that conversation.\u00a0\u00a0Google&#39;s actions show there are still companies who could benefit from reading them.\u00a0\u00a0After all,\u00a0it is clearly breaking three Laws of Identity:<\/p>\n<ul>\n<li>Law 1:\u00a0 User Control and Consent.\u00a0 Users should\u00a0never have identity information merged or divulged without their consent.<\/li>\n<li>Law 2:\u00a0 Minimal Disclosure for a Constrained Use.\u00a0\u00a0It is wrong\u00a0to link all information pertaining to a user across different contexts when it was provided for specific uses.<\/li>\n<li>Law 4:\u00a0 Directed Identity.\u00a0 Systems should not create unnecessary correlation across different contexts unless people opt to do that.\u00a0 They thus should be able support identitfiers that are limited to specific scopes &#8211; as has been the case at Google&#39;s sites until now.<\/li>\n<\/ul>\n<p>And the Attorneys General are onto it&#8230;<\/p>\n<p><a href=\"http:\/\/www.attorneygeneral.gov\/uploadedFiles\/Press\/AG-Google-Privacy-Policy-Letter.pdf\" class=\"broken_link\"><img loading=\"lazy\" style=\"margin-top: 10px; margin-bottom: 10px;\" src=\"\/wp-content\/images\/2011\/07\/attorneysgeneralgoogle_2.jpg\" alt=\"Attorneys General Swarm Google\" width=\"847\" height=\"219\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>U.S. Attorneys General argue that Google&#39;s draconian unification of profile and account information across all its sites invades consumer privacy.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1204"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1204"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1204\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}