The FTC said it marked the first time a company had agreed to implement a wide-ranging privacy program that will cover future as well as current products. The agreement protects people's names and e-mail addresses, as well information about their contacts, location and unique identifiers transmitted by their computer or cellphone. The settlement could serve as a model for restrictions on other tech companies.
"We are sending a signal that we want companies to be accountable for their privacy policies," said Jessica Rich, deputy director of the FTC's Bureau of Consumer Protection.
In its complaint, the FTC alleged that Google used "deceptive tactics and violated its own privacy promises to consumers" when it launched Buzz last year. Google initially made some Buzz users' contacts, such as the address book, automatically visible to others, angering many users. Google later changed the settings so that contacts were kept private by default.
The requirement under the settlement to seek user permission before sharing data with outsiders, known as "opt in," is unusually strict. It could hamper, at least temporarily, Google's ability to compete with rivals such as Facebook Inc. and Apple Inc., which don't need to seek user permission.
"Facebook gets to continue to do opt-out and Google has to do opt-in," said Christopher Soghoian, a privacy researcher who worked briefly for the FTC last year.In a blog post, Alma Whitten, Google's director of privacy, said the privacy misstep with the launch of Google Buzz "fell short of our usual standards for transparency and user control." She said Google is now "100% focused on ensuring that our new privacy procedures effectively protect the interests of all our users going forward."
At the time, Google's privacy policy said it would ask users for permission to use personal information with outside companies "in a manner different than the purpose for which it was collected." Google later had removed that language from its privacy policy, according to the FTC complaint. The settlement would effectively restore that policy for data shared outside of Google. It doesn't apply to data Google shares within the company.
The FTC also charged Google with violating the terms of a privacy trade agreement with the European Union, which governs the transfer of personal data from the EU to the U.S. The FTC said it was the first time it had alleged substantive violations of the pact.
The FTC has become more aggressive in protecting online privacy. In December, the agency called for technology and advertising companies to develop a "do-not-track" mechanism that would allow Internet users to opt out of online tracking.
At a Senate hearing earlier this month, FTC Chairman Jon Leibowitz said that The Wall Street Journal's "What They Know" series on online privacy prompted the agency to "step up our enforcement efforts."
Sen. John Kerry (D., Mass.) said that the Google settlement underscores the need for a federal privacy law that would make all companies adhere to similar standards. "Every company should adhere to this kind of standard, not just Google," Mr. Kerry said.
0 komentar:
Posting Komentar