Don't expect Google's "conscious home" to keep things private…

Two interesting Google-related news stories broke over the last few days. The first is that France’s data protection authority, CNIL, has issued the search giant with an 150,000 euro fine after ruling its privacy policy violated the French Data Protection Act. And the second is that Google has confirmed the $3.2 billion purchase of Nest, a company that develops internet connected home appliances and – in its own words – wants to “realize our vision of the conscious home.” So we have a company that ’s repeatedly violated privacy laws buying a company that wants to make your home “conscious” - sounds like the plot of a bad sci-fi movie.

Impotent regulation

While it’s great news that CNIL has taken action against Google, the penalties imposed are laughable. Google’s last fiscal statement revealed profits of $2.97 billion – and that’s just for a single quarter. One hundred an fifty thousand euros is pocket change (despite being the largest fine the CNIL has issued to date) and if that’s all the regulator can impose then the message is loud and clear: The regulation is not working. How can you expect companies as big as Google to take laws seriously if the only repercussion is a mild slap on the wrist?

We’ve been here before when Google was issued with a $22.5 million fine back in the summer of 2012 by the US Federal Trade Commission. That was the biggest fine in the history of the FTC (Google seems to building quite the track record) but, given CNIL’s ruling,  it obviously didn’t have much of an impact on Mountain View’s approach to privacy.

Google’s dismissive attitude toward regulators goes back even further. The FTC’s record fine was due to Google’s inability to submit privacy audits and the privacy audits were requested because Google was guilty of deceiving users and violating its own privacy policy, when it launched the failed social network Buzz.

Even worse was when Google lied to British and German regulators about collecting data from unsecure Wi-Fi hotspots via its Street Cars. Google said the data collection was a simple mistake, until the US' Federal Communications Commission investigated and discovered the cars were specifically designed to collect the information. What did the regulators do? Pretty much nothing.

Google too big to fail?

So now we’re expected to believe Google won’t violate more privacy laws when it gets to control your toaster. Perhaps Google becoming too big to fail, just like the banks. It’s already arguably the most important internet company in the world and has huge resources and a great deal of clout with policy makers. Plus imagine if regulators actually got tough and threatened to limit Google’s services in their markets - I’m betting most people would have Google violate their privacy, rather than be cut off from its multitude of services (which span search, email, maps, storage and mobile ecosystems).

Without strong regulators, and with the ‘internet of things’ around the corner, this situation is only going to get worse. Google has proven over and over again that it cannot be trusted. Now it’s bought Nest, it’s seems we’re steadily marching toward a world where Google’s tendrils extend into a multitude of home appliances. Who wants a “conscious home” when the consciousness cannot be trusted to keep things to itself?

Featured posts

Related posts

Privacy & Security

IVPN TunnelCrack vulnerability assessment

Posted on September 7, 2023 by IVPN Staff

Context TunnelCrack is the combination of two independent security vulnerabilities (LocalNet attack and ServerIP attack) that affect VPN applications. The research paper detailing these vulnerabilities was published and presented on 11 August 2023. IVPN apps were not tested by the researchers, and unlike other providers, we did not receive a vulnerability disclosure.

Privacy & Security

Most people don't need a commercial VPN to work from home securely

Posted on April 7, 2020 by Nick Pestell

Many small businesses and their employees are concerned about the security of their data whilst working from home during the coronavirus pandemic. We see a lot of confusion surrounding this topic, even from fairly technical folk and there is unfortunately a lot of misinformation being spread by commercial VPN providers themselves.