Google's Scanning of Gmail To Deliver Ads May Violate Federal Wiretap Laws

New submitter SpacemanukBEJY.53u writes "In a declaration that could make Google very nervous, a U.S. federal judge on Thursday rebuffed Google's defense of its targeted ad system that scans the content of Gmail. Judge Lucy Koh — who also heard the Apple-Samsung case — found Google's terms and conditions and privacy policy isn't clear to users. Koh subsequently allowed a class-action suit to proceed against the company (official ruling). The plaintiffs in the suit allege Google violates federal and state wiretap laws by scannning the messages sent by non-Gmail and Gmail users."

Comments

Oh for crying out loud

[Anonymous Coward]

Will this shit die already, this is getting tiring.

It is an automatic system.

I bet Microsoft is funding this, AGAIN.

Re:Oh for crying out loud

[gandhi_2]

By this logic, all mail virus scanners are also guilty.

Barracuda should be worries about that.

Re:Oh for crying out loud

[Monoman]

You beat me to it.

So I guess the question for everyone is should Google (and others) be allowed to scan communications if they state clearly in their EULA what they are doing and why? Does the answer change when the communications include a parties that didn't accept the EULA?

Re:Oh for crying out loud

[MozeeToby]

I agree with you to some extent. An algorithm searching for keywords and displaying appropriate ads? I really don't have a problem with that. Where I do have an issue is where the information gleaned goes into a big database that Google has on me. A big database that can be subpoenaed, or leaked, or stolen. A database that slowly but surely includes information from nearly every act of communication and internet usage. Even if I were to opt out of Google's services, the fact is if I send an email it's likely going to a gmail address, if I browse the internet there are likely Google servers providing parts of the page.

Re:Oh for crying out loud

[Anonymous Coward]

You beat me to it.

So I guess the question for everyone is should Google (and others) be allowed to scan communications if they state clearly in their EULA what they are doing and why? Does the answer change when the communications include a parties that didn't accept the EULA?

"Scanning" can mean very different things. GMail scans and extract the meaning of the communication (as best it can and it is getting quite good) *and* then files this in the permanent marketing profile they have on you and which they continue to build on and reuse. So they are extracting, saving, using and building a database of meaningful content from your email and about you. Other forms of scanning is without actually extracting the content itself, and not storing it in a database on you. This is clearly not exactly the same.

You can still think this ruling against Google is silly, but we should be precise on distinctions like that.

Re:Oh for crying out loud

[dissy]

So I guess the question for everyone is should Google (and others) be allowed to scan communications if they state clearly in their EULA what they are doing and why? Does the answer change when the communications include a parties that didn't accept the EULA?

Here is the very first email Google sent to me when I signed up for Gmail service. Bold is added by me.

Just due to the fact Google already does explain it clearly in their (obviously unread) EULA, as well as in their welcome email, and on more than one help/support page, I doubt explaining it yet another time would make any difference to these people.

----------

Gmail Team 6/25/04 to me

First off, welcome. And thanks for agreeing to help us test Gmail. By now you probably know the key ways in which Gmail differs from traditional webmail services. Searching instead of filing. A free gigabyte of storage. Messages displayed in context as conversations.

So what else is new?

Gmail has many other special features that will become apparent as you use your account. Youâ(TM)ll find answers to most of your questions in our searchable help section, which includes a Getting Started guide. You'll find information there on such topics as:

        How to use address auto-complete
        Setting up filters for incoming mail
        Using advanced search options

You may also have noticed some text ads or related links to the right of this message. They're placed there in the same way that ads are placed alongside Google search results and, through our AdSense program, on content pages across the web. The matching of ads to content in your Gmail messages is performed entirely by computers; never by people. Because the ads and links are matched to information that is of interest to you, we hope you'll find them relevant and useful.

You're one of the very first people to use Gmail. Your input will help determine how it evolves, so we encourage you to send your feedback, suggestions and questions to us. But mostly, we hope you'll enjoy experimenting with Google's approach to email.

Speedy Delivery,
The Gmail Team

Re:Oh for crying out loud

[Noughmad]

Let's say I send a letter to a friend, and he shows it to his wife. Where is my knowledge and consent? There isn't, but there should be an expectation that the recipient has the authority to show this letter to others. In GMail, the recipient has decided that he wants to show all his incoming mail to Google.

Re:Oh for crying out loud

[Mitsoid]

If i send you an e-mail @hggdfshjd.org, how do i know your storage or e-mail handling policy?

E-mail has no reasonable expectation of privacy or secrecy. If anything, it is nowadays considered standard that your e-mail will be stored for at least 30 days, or until deleted. Unless you send an e-mail to a government address, then it's longer depending on the branch/locality/etc... or if it's to someone in the financial industry.. then it's saved even if it's deleted (until requested by a probe, then it's deleted)... My point is, everyone has a different policy, and no e-mail between two people can be ensured privacy and secrecy on unencrypted messages. when going between two distant servers

Also, when the message does arrive, regardless of service, the message will also be scanned by a junkmail filter. It will also, likely, be parsed by the recipients mail filter setting, and also by their anti-virus, anti-phising, and other anti-whatever systems. What makes Gmail's system different? If i submit a message to my ISP as junk, I'm releasing your e-mail to a 3rd party without your consent, and half a dozen machines will read it, process it, and act on it.

If we block recipient mail systems from "automated-reading" of messages, we effectively make it illegal to filter ALL junk, spam, and phising protections.
With the track record of poorly-worded laws we've had, I'd rather assume privacy/secrecy risks myself with encryption, than allow judges, lawyers, and elected officials choose the wording.

Re:Oh for crying out loud

[kqs]

You're right. If you send me a letter, and I show it to my wife, well, you didn't consent to that. Hell, I can show it to the New York Times, and you didn't consent to that, and tough shit to you. Once you send it to me you cannot control who I show it to.

Please stop trying to tell me what I can do with MY email. You sent it to me, so you no longer control it. Stop trying to control me.

Or are you trying to say that gmail users didn't consent to Google having access to their email? Despite the text they saw when they signed up, the contents of the first letter in their inbox, and Google's greatly simplified privacy policy that was all over the news a year ago for months on end? Hell, I applied for this credit card but didn't realize I had to pay it back, pretty please mister judge fix that for me!

Re:Oh for crying out loud

[kqs]

Wow, you truly have no idea how anti-spam algorithms work. Please read up on bayesian networks. They are used by anti-spam software, and they (or something similar) are used by Google's ad systems.

They are exactly the same system. Exactly.

Re:Virus scanning is a service

[gandhi_2]

Somehow I doubt "federal wiretapping laws" take into account how much the person being tapped does or does not enjoy the results.

Amazon Does this too

[gishzida]

Google isn't the only one that reads your mail.

If you have a Kindle Fire or Fire HD they are reading it too. I had the upsetting experience of reading an email on my Kindle Fire HD that announced my father's death and then not more than a few hours later was served a "recommendation" on my Kindle a book on how to write a Eulogy.

I deleted my email account information from the kindle and shut down the recommendation system on the device... and I told Amazon how creepy they were... At least Google hasn't served creepy ads like that... so far...

Maybe Amazon should learn from Google and adopt "Don't Be Creepy" as their motto. Are you listening, Mr. Bezos?

[By the way I tried at the time to put Amazon's actions up as a news story on Slashdot... but it was not picked up as a story...]

Re:Amazon Does this too

[Internal Modem]

You weren't published by Slashdot because you didn't have a blog that quoted another blog that linked to the original blog which had a link to a news aggregation site pointing to the original story.

Re:Virus scanning is a service

[mjtaylor24601]

Virus scanning is a service a provider can deliver to its customers.

Scanning mails for the benefit of the provider for advertising is not beneficial to the customer.

...except in so far as it allows the service provider to make a profit thereby enabling the customer to get access to the service for free.

Informed consent? Really?

[satch89450]

"But people who send e-mail imply consent..."

I'm a long-time Google Apps user, and my company's domain is on all mail receipents' mail, not "gmail.com". So how can you have implied consent when the sender doesn't know that the mail is being sent through Google?

How could Google have been any MORE clear?

[sirwired]

Google has been 100% up-front, since the day they announced the product, that they were going to pay for GMail by scanning your mail messages and guessing at relevant ads. They have made utterly no effort whatsoever to hide or obfuscate this fact.

Re:How could Google have been any MORE clear?

[Todd Knarr]

No, but the person you're sending the e-mail to has. When you send physical mail to someone, you don't know if they've got a secretary opening and reading all their mail for them. They could even have an outside company doing it (what, you think Hollywood stars and politicians read and answer their own fan or constituent mail?). And the law has absolutely no problem with this, nor with the idea that if this will be a problem for you as the sender then it's your responsibility to sort this out with the recipient before sending your mail.

What about spam filtering?

[NoNeeeed]

If the court decides that mail providers cannot, on principle, be allowed to scan the content of a mail message then I don't see why it wouldn't affect content based spam filtering.

This case could have interesting ramifications for all mail providers if the court decides this violates wire-tap laws.

Re:Federal wiretapping laws

[FatLittleMonkey]

NSA doesn't tap wires. They tap fibre.