Slashdot Mirror


Google Calls for International Privacy Standards

HairyNevus writes "The Washington Post has an article detailing Google's request for international privacy standards. Google is taking this matter all the way to the U.N., arguing that a hodge-podge of privacy law unnecessarily burdens Internet-based companies while also failing to protect consumers. Although Google is currently under investigation by the EU for its privacy practices, the company claims it has been a crusader for protecting consumer privacy. Google's privacy counsel Peter Fleischer called America's privacy laws 'too complex and too much of a patchwork,' and the European Union's laws 'too bureaucratic and inflexible.' The alternative? Something closer to the Asia-Pacific Economic Cooperation's framework which 'balances very carefully information privacy with business needs and commercial interests', according to Fleischer."

75 comments

  1. Google can afford to respect local law for now by tjstork · · Score: 5, Insightful

    The problem with international standards for privacy is that some cultures have to give up the privacy rights, and right now, it is too early to attempt an international solution until we know locally what we want our rights to be.

    We Americans might decry European standards and European "bureacracy", but they are Europe's to define. Similarly, whatever consensus we come to about privacy in the USA is our consensus. Until Europeans and Americans nail down what their rights and standards are, it makes little sense to try and adopt an international framework.

    --
    This is my sig.
    1. Re:Google can afford to respect local law for now by gravos · · Score: 1

      And perhaps just as importantly, what the penalties should be for companies who fail to respect those rights. I'm not sure we can seriously expect the same kind of penalties to apply internationally for crimes like "leaking SSNs" when SSNs don't even exist outside of the US.

    2. Re:Google can afford to respect local law for now by Anonymous Coward · · Score: 1, Informative

      There is many countries who have similar things. And they are even called either Social Security Numbers or Person Identification Numbers. As far as I know Finland has one. And Sweden, Norway, Denmark probably also Germany. It's just needed in modern society to have ability to identify the people distinctively. On the other hand at least in Finland the law is very strict what can be done with the people's information and what rights people have to their own info.

    3. Re:Google can afford to respect local law for now by Anonymous+Brave+Guy · · Score: 1

      The problem with international standards for privacy is that some cultures have to give up the privacy rights

      Sorry, but I disagree. If you think carefully, I believe you'll realise there is another remarkably simple solution, and one that is almost certainly in the interests of private citizens everywhere at that. It's just not the solution Google wants.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    4. Re:Google can afford to respect local law for now by SnowZero · · Score: 1

      What, follow the union of laws from both countries, which could be self-contradictory and make doing any business at all impossible?

      We really do need to streamline privacy standards and make them more compatible across international boundaries. Ten years ago people were not concerned about a user in country A running an app on a server in country B which stores his personal data in country C, but today that's a reality. If the laws were similar enough, one could do that sort of thing without too many problems, but today its a legal minefield, even though many companies just like to pretend that it's not a problem.

      Also, streamlining is goal we can achieve realistically; Years ago, international trade was very cumbersome, but modern laws and procedures has made it highly efficient. Laws and regulations did not disappear, but a great deal of regularization (WTO, EU, NAFTA, etc) and clarification made it work.

    5. Re:Google can afford to respect local law for now by hauntingthunder · · Score: 1

      and I don't think that Asia-Pacific Economic Cooperation's framework  is going to sit well with the us and european's cilliberties groups.

      still no problem about giving up theose pesky bloggers/journalists to the govenment when asked eh.

      --
      You will never get to heaven with an Ak 47... But A Zu 30 is good for Low Flying Cherubim
    6. Re:Google can afford to respect local law for now by tjstork · · Score: 1

      The thing is, you could have some universal "privacy" right... but, not all cultures agree with them. And, honestly, I'm not even sure, for myself, what rights to privacy people really have. I'm toying with the idea, in my head, that the internet would be better if it could be enforced that there were no anonymous messages at all, its just, I don't think it practically can....

      --
      This is my sig.
    7. Re:Google can afford to respect local law for now by Anonymous+Brave+Guy · · Score: 1

      What, follow the union of laws from both countries, which could be self-contradictory and make doing any business at all impossible?

      They could be contradictory. But realistically, it would be relatively easy to achieve harmony on the basis that the default position was everyone having privacy and no personal data collection being allowed without explicit consent, and then codifying some reasonable exceptions. Much bigger differences have been worked around when building international agreements in the past.

      The only realistic down-side to harmonising in this way is that a lot of companies whose business models are based on collecting personal data under ethically questionable conditions would lose out to some degree, possibly even going bust. Personally, I don't have a problem with that. I think the individual's quality of life and in practical terms the need to prevent nasty crimes like identity theft far outweigh the need to allow dubious business practices.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    8. Re:Google can afford to respect local law for now by Anonymous+Brave+Guy · · Score: 1

      I have long suggested that removing anonymity on the Internet might be a step forward. In practical terms, it offers little protection of free speech in the face of an oppressive government anyway, and supporting such speech is the major argument in favour of it. Meanwhile, all laws basically rely on being able to hold people accountable for their actions. If you allow effectively anonymous use of the Internet, then you allow anyone to break the law without responsibility. And thus we have everything from spamming to identity theft via bot-net extortion going on, with organised crime now behind much of it, and all basically above the law.

      Of course, in an ideal society, we could allow anonymous free speech where it's useful, safe in the knowledge that people would view it sceptically. In an ideal society, we'd have some way of signing Internet communications to prove our real identity, so people could trust our material knowing that we are prepared to take responsibility for it. Much of the problem today isn't really with the anonymity, it's with the blind faith that so many people put in things that they shouldn't. But I think we're some way from a society mature enough for this sort of openness to work, so in the meantime, we come back to whether the pragmatic step of requiring accountability is justified.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    9. Re:Google can afford to respect local law for now by Deternal · · Score: 1

      I wholeheartedly agree and disagree.

      Of course each country should rule here - however the problem is that we then get the trickle down effect.
      Just like in copyright where US extended copyright, then pressured the EU and they extended copyright the same thing has happened wrt privacy and will continue.

      Just like the doha WTO negotiation rounds where about who to take the blame (EU got the blame this time around) rather then to find a solution for free and fair trade.

      Case in point would be the human rights which where not enacted untill an international consensus could be established and they have successfully been used to raise the bar, instead of the trickle down lowering of the bar which is currently going on.

    10. Re:Google can afford to respect local law for now by Anonymous Coward · · Score: 0

      Mr. Fleischer's proposal is motivated in part to dampen the growing opposition to the Doubleclick takeover. Google is attempting to head-off a global regulatory digital train-wreck. I urge you to add the critical comments in the Post story made by EPIC's Marc Rotenberg. Google should be asked what governmental policies are needed to regulate interactive marketing, esp. as it expands data collection via You Tube, Doubleclick, Feedburner, etc. You won't find any support for meaningful opt-in, full disclosure, limited use, etc. Google is not being candid if it suggests that its plans to expand interactive advertising don't seriously threaten privacy. Mr. Fleisher is lobbying to get a privacy band-aid placed over an ever-growing flow of personal data being squeezed from consumers (by Google and others).

    11. Re:Google can afford to respect local law for now by Kamau+Jackson · · Score: 2, Insightful

      Euro-American consensus is only the tip of the iceberg.

      There are governments that have misgivings about the WWW itself. Considering convenience issues for an American corporation may have an element of humor that we in the USA fail to appreciate.

      I think it is naive for Google to think that countries who can't reach a consensus on biological weapons or the disposal of hazardous waste will seriously consider this privacy request.

      Google wants all the data they can get-- and have profited handsomely from it. Now they face the same challenges that Standard Oil, United Fruit, ITT and, more recently, Microsoft have had to come to grips with:

      If you intend to do multinational business, you'll need to comply with the laws and customs of each nation.
      and, P.S., there is no privacy agreement that can't be overridden by a "national security" imperative.

    12. Re:Google can afford to respect local law for now by SnowZero · · Score: 2, Insightful

      They could be contradictory. But realistically, it would be relatively easy to achieve harmony on the basis that the default position was everyone having privacy and no personal data collection being allowed without explicit consent, and then codifying some reasonable exceptions.

      If its relatively easy, please explain how you would maintain SOX or ISO 9001 compliance while not keeping any personally identifiable records of your customers. It's way more difficult than you make it out to be. Also, the exceptions-only approach sounds like outlawing all international trade and then enabling it on a product-by-product basis; That seems to give the government way more control than they ought to have.

    13. Re:Google can afford to respect local law for now by Anonymous+Brave+Guy · · Score: 1

      You're overstating the case by a large margin. For one thing, I didn't say you couldn't keep any personal data, I just said that was the only safe default and it is the reasonable exceptions that should be spelt out explicitly.

      For example, it would certainly be reasonable to codify a general exception that said businesses could store personal data necessary to administer a legitimate transaction with a customer, for as long as is necessary to conduct that transaction. However, it is not necessary for a business to keep my credit card details on file after the transaction has been concluded and they have their money. Nor is it necessary for them to keep my contact details on file for future marketing purposes. Both of these are common practice today but are damaging to society as a whole, and I have no problem with an outright ban on them.

      Such a draconian approach to regulation may impose significant extra costs on businesses. I do recognise this. I just don't care. If some over-heavy regulatory framework requires collecting more data than this then the regulation is broken. If you need to store excessive amounts of personal data to conduct your business then your business model is broken. Neither of these is as important as protecting a basic right to privacy, and in doing so limiting the potential for credit card fraud, identity theft, and other crimes that can and do screw up the lives of many people for months at a time.

      Oh, and your outlawing all international trade thing is just a straw man. EU data protection legislation already prohibits passing personal data outside the EEA without prior consent, yet strangely we all continue to trade with other countries just fine.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  2. Re:priorities by Anonymous Coward · · Score: 0

    More like the government controls the citizens.

  3. "Privacy" by Scareduck · · Score: 5, Insightful

    will be defined as broadly (for Google, etc.) as possible. You won't recognize it after they're done, and you won't have any recourse because it's the "international standard" -- just like copyright restrictions.

    --

    Dog is my co-pilot.

    1. Re:"Privacy" by fadilnet · · Score: 1

      international or not, for me, as a google search engine user, the term privacy will grow on me when google will clear up all the google cache. after that, it can start flirting with the media with claims of "international privacy standards, bla bla bla". just like a world order is just utopia, so is this. privacy standards depend on cultures, values, religion which vary in various countries. it's not just like a damn format that can be made into a standard.

      --
      Do I require the c-sig package to have a signature?
  4. Privacy information easily bought from Google by Via_Patrino · · Score: 2, Insightful

    Privacy information can easily be bought from Google

    FTA: "To target their advertising, both Google, which specializes in text ads, (...) collect information on which sites users visit."

    As if it was just about visited sites, not about emails, searches, IMs, youTube, blogspot, orkut, user profile, ... anyway ...

    If you need data collected by Google just set up adwords for your needs (location, subject) redirecting to a brand new url. Where you can, for example, see if the redirected users have one of yours two-years-google-style cookie, and relate that cookie with profile data filled by users of your free-as-in-lunch services or with the e-mail addresses of webreaders of your crossite html embedded spam.

    Later you can bomb those people's email addresses with specialized phishing/scams/advertisement.

    And Google is still no evil, they just provide the circus which is distracting people from reality and hidden disclaimers.

    1. Re:Privacy information easily bought from Google by Anonymous Coward · · Score: 1

      Privacy information can easily be bought from Google
      FTA: "To target their advertising, both Google, which specializes in text ads, (...) collect information on which sites users visit." Those two sentences have nothing to do with each other. My government collects a lot of taxes too, but that doesn't mean I can easily access the funds. If you've got evidence they sell it, show it. Otherwise stop FUDing. There's enough wrong today with user privacy that you don't have to make stuff up.

      As if it was just about visited sites, not about emails, searches, IMs, youTube, blogspot, orkut, user profile, ... anyway ... Yes, google has an assload of information, which can be a little scary. Then again, so does my bank, credit card company, and health insurance company. Medical privacy works pretty well because we have some pretty good laws in place to balance privacy with necessary sharing. We need similar laws for personal privacy on the internet and we'll be in pretty good shape. The EU is leading the way IMO. After that regulatory framework is in place, I don't see any reason to fear an internet company more than a credit card company.

      If you need data collected by Google just set up adwords for your needs (location, subject) redirecting to a brand new url. Where you can, for example, see if the redirected users have one of yours two-years-google-style cookie, and relate that cookie with profile data filled by users of your free-as-in-lunch services or with the e-mail addresses of webreaders of your crossite html embedded spam. So if you are using profile information entered onto one of your own sites, with a cookie from one of your own sites (you can't access google's cookie anyway), then what the hell does this have to do with google? All you said is that if you get someone's personal information on your website, you can abuse it. Duh.

      And Google is still no evil, they just provide the circus which is distracting people from reality and hidden disclaimers. Exactly. You fret about google, meanwhile sloppy companies lose millions of credit card numbers, universities and hospitals lose laptops with thousands of student/patient records. Yep, google is the problem.
    2. Re:Privacy information easily bought from Google by Anonymous Coward · · Score: 0

      If you need data collected by Google just set up adwords for your needs (location, subject) redirecting to a brand new url. Where you can, for example, see if the redirected users have one of yours two-years-google-style cookie, and relate that cookie with profile data filled by users of your free-as-in-lunch services or with the e-mail addresses of webreaders of your crossite html embedded spam. Ok here's how cookies work:
      Site A sets cookie on first visit. On subsequent visits your browser sends site A's cookie as part of the HTTP request.

      Site B sets cookie on first visit. On subsequent visits your browser sends site B's cookie as part of the HTTP request.

      Site A cannot get site B's cookies and vice versa. As a matter of fact, you can even restrict cookies to virtual domains. So for example if you set a cookie for yro.slashdot.org without specifying the domain (or if you explicitly define it as such), you won't be able to see it from apple.slashdot.org, etc.

      So.. I trust Google with my emails, search history (whatever they collect) and my name. I also save their 2-year-cookie and have my browser send it back. How does this relate to site B being a spam fest if I don't give them any of my information other than my IP address and where was I redirected from?

      What you're saying would apply if Google themselves wanted to use my information in a malicious matter, I trust that they're better than that, and really that's what that's all about.

      You "need" to trust "things" for you to be on the internet, otherwise you can't really use it.

      - You trust your OS: Did you read every line of source code and made sure there are no backdoors? You do at least trust the people who verify and read code everyday that you also did not meet or know, right?
      - You trust your browser: See OS
      - You trust Slashdot: You're posting here even though Rob Malda could be a FBI agent and Sourceforge is just a front and they are about to knock on your door now for trying to mess with a big corporation that pays their salaries, right?
      - You trust life: You are not in the Matrix, or are you?

      There are some ethical people left in this world, even at Microsoft (maybe a janitor).
      But nevertheless, you need to set a level of trust with entities that you deal with and what kind of information you can trust them with...

      I need to get to bed.
    3. Re:Privacy information easily bought from Google by Via_Patrino · · Score: 1

      I know how cookies work, as DoubleClick still know, and many of the bad guys do. And they hope people believe that naive explanation.

      Did you ever visit DoubleClick websiste? Probably not, but if you don't delete your cookies as said, you probably have one of them on your machine.

      You don't need to "visit site B" as you said, all you need is to open a html page (a site or webmail) that have embedded requests to site B.

      Then you're tagged with a cookie from B.

      B can sponsor a free-as-in-lunch service and get profile of people (like the email address) from there.

      B can operate a store where you bought something before and didn't care to fill all you personal "delivering" data.

      B can send spam with embedded requests to pages like www.website.com?id=youremailaddressID and associate a cookie with the email address where the spam was previously sent.

      They have your personal data, but they may not have your profile.

      Google have a lot of data about you they declare using to target advertisements.

      That's how the bad guys get that info from Google.

      So I'm site B and need to know people who suffer headache in the US. I set up adwords accordingly and redirect that ad to a brand new url where I've and embedded requests to www.website.com?id=ihaveheadacheID where I associate that with the previously stored personal data cookie (or wait until you request one).

      So now I have both your identification (where the email address is usually enough) and know your privacy data I need.

      That concern is not just about Google but the other ubiquitous examples you provide would never do something Google is doing because the public is suspicious about them, scrutinize their acts and so don't provide much (behavioral) data.

      But everyone is happy about Google collecting your data and selling to someone else for pennies because "Google is no evil". Repeat with me: "Google is no evil"

      If they care about privacy they don't need to wait for laws, their urge for laws changes is because they want weaker ones.

    4. Re:Privacy information easily bought from Google by rtb61 · · Score: 1

      Now it really depends what laws the googlites would actually consider weaker. It seems the google loves the Chinese governments pirvacy and censorship laws (as in reality they go hand in hand). Perhaps google wants to provide us with the harshest and most strict privacy laws, of Communist (corporate fascist) China ie. you have none, everything you do or see or even attempt to see will be recorded and used to generate profits for google, for targeted marketing and of course for the only people google is willing to sell you data to (generally they only rent out your privacy to other private companies for marketing purposes) government agencies. You think google sued to protect you data from prying by that government agency, they just didn't want to give it away for 'FREE', googles loyalty is to it's profits just like any other major multinational corporation.

      --
      Chaos - everything, everywhere, everywhen
    5. Re:Privacy information easily bought from Google by PurplePhase · · Score: 1

      I think this is where I chime in and say:

      I've created several email addreses for myself through my ISPs and keep them tightly focused on who gets them. Each company gets it's own email address.

      On my personal account after 2+ weeks of sending and receiving email only with friends with GMail accounts, I started to receive my first spam. This is after several month of spamlessness. Earlier emails were to the same people plus some with other accounts. I've never registered that email address with any company nor used it in correspondences with any company.

      I know correlation doesn't equal causality, but still... it is mighty suspicious. I'm personally staying away from GMail, though I hate to now have to requests non-gmail addresses from friends.

      8-PP

  5. Google's New Privacy Standard by Anonymous Coward · · Score: 5, Funny

    "If we can't index it, it's private... until we figure out how to index it."

  6. I worry by TubeSteak · · Score: 5, Insightful
    Whenever [Your Country] laws get harmonized with international laws, it's usually because the international laws are weaker.

    Google's privacy counsel Peter Fleischer called America's privacy laws 'too complex and too much of a patchwork,' Some states have laws that are stricter than Google would like

    the European Union's laws 'too bureaucratic and inflexible.' The entire EU has laws that are stricter than Google would like

    The alternative? Something closer to the Asia-Pacific Economic Cooperation's framework which 'balances very carefully information privacy with business needs and commercial interests', according to Fleischer." Ahhh... finally someone whose privacy laws are not as strict as everyone else. Lets harmonize all other laws with these.

    I won't go into the issues surrounding [Any Corporation] pushing for a change in not just national laws, but international laws. Suffice it to say that it isn't something I like.
    --
    [Fuck Beta]
    o0t!
    1. Re:I worry by Tim+C · · Score: 1

      Whenever [Your Country] laws get harmonized with international laws, it's usually because the international laws are weaker.

      Well in this particular case, I agree that that's what Google is pushing for. However, in my experience the opposite is generally true - see for example copyright laws.

      I think in the case of businesses pushing for harmonisation of laws it would be more generally true to say that push to harmonise in the direction that most benefits them. Hence the US and WTO pushing for companies to sign up to the Berne convention and/or implement their own version of the DMCA, Google pushing for privacy laws to be harmonised to a lower common denominator (if not the lowest), etc.

    2. Re:I worry by TheoMurpse · · Score: 1

      That's not really true, and it depends on what side you're on. For example, the US didn't grant copyright to works originating in foreign countries until it joined the Berne Convention in, I think, 1989. Then it did, and also extended copyright retroactively to foreign works through the URAA. Thus, through international law, if you're a "content owner," when the US adopted the international framework, the laws became stronger.

      On the other hand, the public's right to use the expressions as they wish became weaker.

      So, as I said, it depends on what side of the law you're on.

  7. Trust by J05H · · Score: 2, Interesting

    Who do you trust more, Google or the government you live under? That is the root question.

    There have been many recent breeches of information security in government and corporate computers. (esp. banking/credit/health sectors) Does a company like Google, who's bread and butter is information, have a naturally more trustable position from the end-user's perspective? Is it possible for Google to create a firewall to protect users from all data intrusion?

    Google briefly had a market cap higher than Lockheed. They represent much more than just a search engine.

    Josh

    --
    gigantino.tv - Heavy but weighs nothing.
    1. Re:Trust by Anonymous+Brave+Guy · · Score: 3, Insightful

      Who do you trust more, Google or the government you live under? That is the root question.

      My government, without hesitation.

      And believe me, that's really saying something.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    2. Re:Trust by glwtta · · Score: 1

      There have been many recent breeches

      Well that's good to hear - I was afraid those things were going out of style!

      --
      sic transit gloria mundi
    3. Re:Trust by Anonymous Coward · · Score: 0

      Neither. Only a fool puts his trust in anything other than people he knows personally.

    4. Re:Trust by KDR_11k · · Score: 1

      The government needs my information to provide services I want. Google doesn't need my information just to display search results.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    5. Re:Trust by Anonymous Coward · · Score: 0

      Who do you trust more, Google or the government you live under?

      That's not even a question. As an individual, your relationship with Google is one of voluntary association -- ultimately they must rely on persuasion, not coercion, to get you to buy their products and services. There's room for corruption here, but...

      On the other hand, your relationship with government is one of pure coercion -- ultimately everything government does is backed with the threat of eventual physical force. You don't have a choice when it comes to government: if you refuse to buy their products and servies, you go to jail.

      (Before anyone raises the "but you can always leave" argument, please sit down and think about what that really means: as a human being, you don't have the right to live on the very land you were born into without giving up your god-given right to free choice and self-ownership.)

    6. Re:Trust by houghi · · Score: 1

      Who do you trust more, Google or the government you live under? That is the root question.


      When you live in the USofA you are screwed either way. Neither Google, nor the US Governemenet are interested in your privacy. It is a pity that there is no one looking after the indvidual and doing so is even thought of as evil and anti-american.
      --
      Don't fight for your country, if your country does not fight for you.
  8. Re:priorities by p0tat03 · · Score: 2, Insightful

    Nah. The government only has two real ways to control its citizenry: policing, and sabotage of the education system. The latter takes some time (years upon years) to take effect, so to affect any sort of short to mid term control there is only the option of sending cops as your henchmen to do your dirty work, either brutal suppression of speech, or just regular enforcing of asinine laws.

    No, indeed, the government doesn't control its citizens, corporations do. Or rather, the two work in tandem, but it is the corporation that interacts directly with the population, rarely the government. Want to project a pro-war message? Movies, music, toys, books, all influenced by the government, but in the end produced by corporations.

    We need a new word for this, because really it isn't the people controlling government controlling corporations, no, government and corporation are now more or less the same thing. Look at the executives in the American government, all of them in cahoots with all sorts of private enterprise. "Govcorp" is more like it. So in the end it is Govcorp controlling the citizens.

  9. Not bad for a US company by dotancohen · · Score: 0, Interesting

    I've always taken Google at their word of "do no evil". For an American company, they do seem to really care about the consumer.

    --
    It is dangerous to be right when the government is wrong.
  10. The circus is finally out in public by YrWrstNtmr · · Score: 3, Insightful

    Now we shall see the slow opening of what's been happening for years. Corporations telling governments what to do, and getting it. Google is no different than any other corp, except they are laying their cards out on the table for all to see.
    "Governments of the world...this is what we want you to do (because it will help our bottom line)", instead of the standard backroom deals.

  11. What is the difference? by Reverse+Gear · · Score: 1

    So does anyone know what the Asia-Pacific Economic Cooperation's framework privacy laws look like?
    Anyone living in countries having these laws.
    A description like 'balances very carefully information privacy with business needs and commercial interests' says pretty much nothing especially from someone who has a major interest in describing things in a positive way.
    Can anyone tell me what the actual differences are between these laws and for example a specific EU country (as far as I know the laws differ pretty much in the EU from country to country still) or in the US (perhaps specific state laws)?

  12. Google vs. democracy? by DoofusOfDeath · · Score: 1

    So basically what Google wants is for decision about laws to be further and further removed from small communities, and instead moved to national, and ultimately international, bodies.

    When this happens, individual voters rightly believe that they've lost a meaningful say in the laws that govern them.

    Corporate profits are not a good reason for us to give up our freedom of self-legislation.

    1. Re:Google vs. democracy? by DrEldarion · · Score: 3, Insightful

      When you have an international standard, everything you need to do is clear and straightforward. What Google wants is a standard they can apply universally rather than having to worry about breaking the law when someone in a very privacy-protective country accesses a system designed for a region with less-stringent requirements.

      This is obvious, and people are overreacting.

    2. Re:Google vs. democracy? by TubeSteak · · Score: 2, Interesting

      What Google wants is a standard they can apply universally rather than having to worry about breaking the law when someone in a very privacy-protective country accesses a system designed for a region with less-stringent requirements.

      This is obvious, and people are overreacting. No shit it's obvious, which is exactly why people are "overreacting".

      Here are the only possible scenarios:
      A) International standards are made consistent with the countries that have the highest levels of privacy protection
      B) International standards are made consistent with the countries that have the lowest levels of privacy protection
      C) International standards are set somewhere between A & B

      Now whatever answer you pick, countries are going to get screwed:
      A) Low standard countries have to pay lots of money to meet the highest standards
      B) Citizens of countries with high standards get the shaft as standards are lowered
      C) A combination of A & B
      --
      [Fuck Beta]
      o0t!
    3. Re:Google vs. democracy? by istartedi · · Score: 1

      When you have an international standard, everything you need to do is clear and straightforward

      We know that because it's written in ISO Standard Document 42332/J, Chapter 6, subsection 3, paragraph 2.

      Easy setups aside, so what if it's clear and straightforward? If the standard says "bend over" that's very clear and straightforward. If the standard says "everybody has to do things the same way", that's very clear and straightforward.

      So, Google, you want it easy. Well, sorry Google, that's Sloth. Sloth is one of the Seven Deadly Sins, isn't it? So, quit doing evil. If you try to jam a one-size-fits-all solution down our throats, if you try to run roughshod over sovereignty via international organizations and deal-making, just to satisfy your Sloth, that's evil. So stop it.

      --
      For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
  13. Dear Google, by Beryllium+Sphere(tm) · · Score: 1

    Be careful what you wish for.

    You might get it.

  14. Place a new world order by Anonymous Coward · · Score: 0

    Multinational corporations want world government. One morality and one set of laws leaves more computing power for profits and data mining.

  15. In other news: by zblach · · Score: 1

    pot calls for black kettle!

    --
    # cat /dev/mem | strings | grep -i sheep | wc -l i can't sleep.
  16. That sounds like praise for European privacy laws by mmcuh · · Score: 4, Insightful

    If Google, a company whose main business model is to know everything about everyone, thinks that the European privacy laws are 'too bureaucratic and inflexible', the EU commission and the European parliament must be doing something right.

  17. Re:priorities by A+nonymous+Coward · · Score: 4, Insightful

    We need a new word for this, because really it isn't the people controlling government controlling corporations, no, government and corporation are now more or less the same thing.

    Fascism comes to mind.

  18. Re:That sounds like praise for European privacy la by pjt33 · · Score: 1

    From my perspective, as an individual, the EU Directive on data protection is one of the best things to come out of Brussels.

  19. So the EU privacy regulation is too bureaucratic.. by vidarh · · Score: 1
    The EU regulations (which are implemented as law by the individual member states, and hence there are variations) for the most part a) define what is "personal information", b) require companies to delete personal information they collect that they don't have a genuine business need for (i.e. keeping financial records is a genuine business need - keeping your e-mail folders around after you've closed your e-mail account is not), c) require companies to track where they got someones personal information to allow customers to track down someone who's illegally sharing their information, d) require companies to, for a fee, let anyone know what information the company holds about them so that they can demand it deleted or demand it corrected (subject to laws and regulations - i.e. you can't order a company to delete details of what you owe them for example), e) require express consent to share a customer private information (i.e. the customer needs to be asked a question or presented with a checkbox etc. allowing them to opt in or opt of having their information shared) except as required to fulfill their obligations to the customer, f) require companies to take reasonable measures to protect the data and ensure only staff that need access has it.

    In my experience, it's really not particularly onerous, and very few customers will EVER make use of their rights to ask for information or have it deleted. If they do, assuming your system holds the information in a sensible way, it is fairly simple to comply. Apart from that the main restriction is that you can't actually buy and sell customer information unless the customers have consented to the usage. That part I can see Google hating - I always carefully consider whether or not I trust a company not to shaft me enough to let them share my data, and generally I'm far more protective about my e-mail address and phone than about my postal address.

    I've never noticed the bureaucracy Google speak of, and I've dealt with privacy surrounding billing systems in multiple EU countries. What the EU regulations demand is good practice anyway for the most part, and apart from a few unscrupulous companies that would happily sell customer information without consent, most people really aren't affected much.

  20. "Carefully balanced" by Anonymous Coward · · Score: 0

    Should be read to mean, "in alignment with Google's mission to gather all the world's information and make it useful." Which is to say, your privacy is toast.

    I dunno how they manage to say "Don't be evil," and "we care about your privacy."

  21. Neither by Anonymous Coward · · Score: 0

    Why should anyone trust Google with anything?

    Because they say they do no evil?

    They're a corporation, like any other, designed to make money. Your information is their bread and butter.

    I don't particularly trust the government to keep my data safe, but the difference is corporate evil where they sell your information vs. government incompetence where they sometimes release it by accident.

    I'll take incompetence over greed any day, thanks.

    1. Re:Neither by Anonymous Coward · · Score: 0

      So I guess you keep your savings buried in your backyard?

  22. Re:That sounds like praise for European privacy la by Anonymous Coward · · Score: 0

    Mod parent up. One of the few things the EU does well is provide rules to protect personal data from abuse by corporations, by empowering the individual to control its dissemination (like having copyright to that data).

    It really isn't much of a challenge to business - unless your business is collecting personally identifiable data and you don't want the subjects of that data the right to view it (for reasonable cost of processing), prohibit it from being disseminated, or have it purged. And if this is your business model, I look forward to your prosecution.

  23. Bad Precedent Already Set by Jane+Q.+Public · · Score: 1

    Similar, but not identical to what someone said above:

    The problem with setting "International Standards" is that United States standards that have worked quite well tend to get watered down.

    This has happened at least twice before, when copyrights and patent standards were "internationalized" to better match European standards. Neither of them now work anywhere near as well as they used to, before our government messed with them.

    If it ain't broke, don't fix it. And I am goddamned tired of our "representatives" giving away our rights to strangers.

  24. What the hell.. by Anonymous Coward · · Score: 2, Insightful

    Commercial interest should have nothing to do with my right to privacy. NOTHING.

    1. Re:What the hell.. by dshk · · Score: 1

      The problem is that the laws of two countries are different but you can be the subject of both laws. And the laws may contradict. I talked with a friend today, he is a lawyer, and he said that you can be arrested in the USA if you don't comply with the USA law (assuming that you travel to there), on the other hand if you do comply then you will be punished in your own country. One of their clients were in such a situation recently, and I was also in a similar situation this week. This was a friendly conversation only, and not legal advice, so I may be wrong, but it can be said that the current rules are not well defined in an internatinal context.

  25. European data protection framework by Anonymous+Brave+Guy · · Score: 2, Insightful

    The laws do differ in Europe, but even the least common denominator is considerably stronger than what the US has. (Obligatory Wikipedia citation for background)

    The problem with this whole debate is that it is often presupposed that supporting commercial interests is a good enough reason to allow the arbitrary collection of personal data in the first place, and the question asked is only to what extent this should be regulated. I submit that by the time you get that far, you've already made an irrecoverable error: the only long-term safe position is that by default everyone has a basic right to privacy and collection of any personal data is illegal, and then you codify the exceptions to this principle. Unfortunately, even the EC legislation currently makes this mistake — which might explain the numerous unsavoury business practices based on involuntarily collection and profiling of personal data that are fast becoming commonplace here, and the consequent reduction in general quality of life for everyone affected (except those who own the businesses concerned, of course).

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  26. Google is feelling american privacy law harsh by Via_Patrino · · Score: 1

    Google is feeling american privacy law harsh

    In my country, unless you sue Google, they force you to follow american laws, which seems the only one they spontaneously obey.

    Google have sales and development team here, they have servers and private network locally (which they don't say the purpose). Even both the offender and victim being local, when you ask something to Google, the only answer you get is:

    "We are US based, fill a DMCA form and send to us by regular mail (in the US) or fax it" and wait about a week until that piece of paper is manually checked and only the content specifically mentioned on that mail is removed.

    The copyright violation can be obvious as possible, it's usually the sole purpose of a user account, which is often named after it. But Google offer no help besides the "wait a week for each bit" method.

    In that particular case american law fits Google desires of making copyright compliance more difficult.

    From what I know from Google if they are calling an international standard on privacy is because they are not liking american privacy laws.

    Other countries laws are not a problem since, until now, they usually don't obey them spontaneously.

  27. Re:So the EU privacy regulation is too bureaucrati by Anonymous+Brave+Guy · · Score: 2, Informative

    AFIAK, even in Europe you still do not have the rights to demand that a company delete personal data about you or to prevent them from collecting it in the first place. You only have the right to see (for a fee) what they're holding about you, and to require them to correct it if it's wrong. Some countries impose more restrictions than this, but they're not universal. This is a major part of the privacy problem, IMHO.

    --
    If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
  28. B*llocks! Why don't they set their OWN rules! by Wonderkid · · Score: 2, Interesting

    If the owners of a business don't posess enough common sense and concept of decency to protect their users, then they don't deserve and should not be permitted to run the business - no matter their corporate might! As posted on our news page, all that is required is that web portals finally start putting the well being of their users ahead of their shareholders because the silent majority of people will soon tire of being fodder for generally worthless 'advertising' that often relies upon breaches of our most sacred asset. And another point, with all the amazing technology and intellectual capital out there, isn't it about time that the industry begins to devise alternative methods with which to monotise their services? Thinking never hurt anyone. /Rant over. Let the common sense begin!

    --

    O'WONDERWe're working on it.

    1. Re:B*llocks! Why don't they set their OWN rules! by Anonymous Coward · · Score: 0

      isn't it about time that the industry begins to devise alternative methods with which to monotise their services? Nobody's stopping you from going back to Compuserve. Personally, I'll stick with the modern ad-supported internet.
  29. Easy to harmonize themselves by speaker+of+the+truth · · Score: 1

    If Google is sick of having to tighten up their privacy policy for every local government that's stricter then their current policy, there's an easy solution. Find the state/country with the strictest privacy laws and make that your universal policy. I imagine the amount of places you'd have to modify it for local laws (such as laws that require you to retain data longer then your new policy says) will be significantly less and it will make for greater privacy for users all around.

    --
    Using openSUSE instead of Windows since 9th of October, 2007 and liking it.
    1. Re:Easy to harmonize themselves by Anonymous Coward · · Score: 0

      so now your doctor, who's incorporated, isn't allowed to get information from the company that your radiologist works for ... hint, it's a right royal pain in the ass in the US.

    2. Re:Easy to harmonize themselves by speaker+of+the+truth · · Score: 1

      We're talking about Google not doctors. Nice straw man though.

      --
      Using openSUSE instead of Windows since 9th of October, 2007 and liking it.
  30. Google is taking this matter all the way to the UN by EmagGeek · · Score: 1

    Yes, folks, because that's where you go when you REALLY just HAVE to get it DONE!

  31. Irony by Anonymous Coward · · Score: 1, Interesting

    Google calling for privacy. GOOGLE!!! The guys who are keeping a huge data mine on anyone who uses their services...

    This is as funny as "Don't be evil"! Google just spews propaganda, and techies lap it up like good little doggies. And as long as they can entertain the masses with Microsoft execs throwing chairs and phony gestures to the FOSSie MS-hater community, they can keep growing that data mine bigger, and bigger, and bigger. Oh, and let's not forget about how much help they are giving to China's efforts to suppress their citizenry!

    Don't be evil... soothing words for gullible sheep!

  32. google == aol: get protection by talledega500 · · Score: 1
  33. Ha ha..Google speaking about Privacy by Anonymous Coward · · Score: 0

    Google and privacy laws do not mix. It does seem rather odd that Google is pushing this. With all the poor publicity towards Google caused by privacy advocates this may be an attempt to save face. Google just wants to protect all the data they collect on individuals from getting into the hands of others who might make a profit from it without first paying Google! Btw who do they think they are? :)

  34. Re:priorities by Anonymous Coward · · Score: 0

    You are my tinfoil hat god.

    And no... that's not sarcasm.

  35. Re:So the EU privacy regulation is too bureaucrati by kamasutra · · Score: 1

    That's certainly not true in Slovenia (which is a part of EU). As a company you have a right to collect only data that you actually need and get to keep parts that you need for as long as you have to and not any longer.

    You certainly have to delete personal data when request by owner in reasonable amount of time unless you have legal obligations to keep it.

  36. Re:priorities by Palpitations · · Score: 1

    We need a new word for this, because really it isn't the people controlling government controlling corporations, no, government and corporation are now more or less the same thing.
    Corporatocracy and plutocracy come to mind...
  37. Re:moron calling for 'standards' for anything by PsychosisBoy · · Score: 0

    I am fairly certain that you are suffering from schizophrenia, or another psychotic disorder.