EU Gives Google Privacy Policy Suggestions About Data Protection

itwbennett writes In a letter to Google (PDF) that was published Thursday, the Article 29 Working Party, an umbrella group for European data protection authorities, said Google's privacy policy, in addition to being clear and unambiguous, should also include an exhaustive list of the types of personal data processed. But if all that information is overwhelming to users, Google should personalize the privacy policy to show users only the data processing it is performing on their data.

Comments

Re:Personalized privacy policies?

[BarbaraHudson]

"Google should personalize the privacy policy to show users only the data processing it is performing on their data."

13. Shared data. The subscriber agrees by uploading personal data to Google cloud that any dick pics are both hackable and for sale to the highest bidder.

And guys will want to show that theirs is "bigger and better", so they'll bid on their own pics rather than having them sit there for one tenth of a cent. Google can make a fortune by having shill bids bump the price up. I'm sure they'd be able to develop algorithms that would bring the biggest yields.

Or they can go the "social media" route. "George, your friend Harry just received a bid of $50.00. Your current high is ten cents. Would you like to put a reserve bid on your pic? Suggested amounts are $50, $100, or [ENTER AMOUNT HERE].

Re:BOYCOTT SLASHDOT

[Anonymous Coward]

Regardless of whether it's internal or external. A website should NEVER play a sound without the user's permission.

Slashdot should have the sensibility to drop the advertiser who forcibly play sound.

The only people who are still seeing ads on Slashdot are the people who are trying to be nice. The rest already use an ad blocker. Slashdot reciprocates nice users with annoying loud ads.

Google is pretty good here

[NitWit005]

Read Google's privacy policy: http://www.google.com/policies.... It seems fairly readable to me. A list per-service might be theoretically useful, but I doubt a normal human would read through each of them.

But take a moment and look at what Google offers here. Google lets you see most of your data on your account dashboard, view and edit your search history, view and edit what ad categories are targeted at you, sign up for account activity reports, and has fairly readable multi-lingual help pages. That's better than almost anyone else.

Maybe Google's advertising practices or monopoly power are issues, but on the issue of data transparency, I think they passed the "good enough" level quite some time ago. The real issue appears to be that even if a company provides good information, no one will bother to look at it.

Re:Google is pretty good here

[martin-boundary]

fairly readable to me. A list per-service might be theoretically useful, but I doubt a normal human would read through each of them.

Isn't that the whole point of this suggestion? People don't like to read impersonal legalese, their eyes glaze over as soon as things get too abstract. But a clear personal document which says "Hey Joe, you bought those slippers for your wife yesterday, and we've passed this information to the following companies: Nike, Kmart, and Kink.com. Nike has bought an ad to show you a pair of women's tennis shoes at $99.95 tomorrow night when you're reading CNN, Kmart has bought your online purchasing history for the last two weeks, which includes the groceries you bought, the 50m of rope you got last sunday, and the timings of your drive home every monday. Kink has subscribed to your google account update feed, which includes realtime alerts any time you buy bondage related products in the next 6 months, because we told them about the 50m of rope and the average amount you spend monthly on non-essentials.

The beauty of this particulary suggestion is in fact that Google are working very hard already to do personalization, it's just that they want to exploit you via this information. So it shouldn't be difficult for them to show you everything, if forced to do so.

Re:Last Straw

[oneandoneis2]

As an EU citizen, I was delighted when the "right to be forgotten" ruling began a debate that's long overdue about online privacy. And I have no problem with the company at the absolute forefront of gathering information about individuals being told "Tell people what you're gathering, yes it's your problem to make it accessible."

The Internet we HAVE, where all information that can be gained about a person is considered fair game, is not necessarily the one anyone actually WANTS. The EU should be applauded for insisting that actual thought be applied to what's going on instead of just allowing the endless procession of "Hey, we can do this! So we'll do it from now!"

You can call them "tech-incompetent", but I label people with your attitude "social-phobic". The only limit on what's happened on the internet since its inception is "What's technically possible?", it's about time the people who asked "What do we want to permit?" got some room at the table.

I think it is a sensible suggestion

[Brandano]

And should be implemented, as long as all other providers of online services are held to the same standards.