First, this is about privacy rights. Second, this is an independent agency. Third, it is actually rumored that other equivalent agencies in the EU will take the same kind of measures.
You seriously don't think there is a political motive behind this and the other French Google issues? That and the grasp the copywrite lobby have on the french government are certainly influences behind creating an atmosphere behind this.
Not to mention the unrealistic and technically infeasible nature of the demands. The french government are a madman loose in the room. On many levels and issues.
Yawn. I'll believe this is something other than a publicity stunt when they start going after Microsoft with the same zeal for making essentially the same privacy policy changes:
How did we reach the point where we suspect a country's privacy regulator of engaging in a publicity stunt (why? what do they gain from publicity?) while ignoring the point they're making - that Google waited for the last day of a 90-day deadline to amend its privacy policies to comply with French law, only to question the regulator's reasoning.
Is it not possible that the answer could be the simplest one, Occam's Razor and all, that Google doesn't want to comply with French privacy law because it interferes with its business model?
> How did we reach the point where we suspect a country's privacy regulator of engaging in a publicity stunt (why? what do they gain from publicity?)
Are you new to the world? Or just hopelessly naive?
It's called politics & lobbying.
> Is it not possible that the answer could be the simplest one, Occam's Razor and all, that Google doesn't want to comply with French privacy law because it interferes with its business model?
Occam's Razor doesn't apply here. It never applies to law, because law is not about simple, concise rules of logic. And second, it doesn't apply because your scenario doesn't make any fewer assumptions than other scenarios.
It's possible that French law is right and Google is wrong. It's possible that Google is right and French law is wrong. It's possible that Google is right, French law is right, and the regulators are wrong.
And really all of those are equally likely possibilities.
That is a generic explanation that offers absolutely zero insight about this particular incident. From the article, the regulator waited for 3 months for Google to comply, after which it threatened to impose fines. Any other regulator around the world would have done the same when faced with a company refusing to abide by its laws.
It's part of a big song and dance. Google doesn't think it violated the law, the regulators think they did. Google is taking the entire amount of time they were given before responding with "no", and now the regulators are banging the pots and pans.
This is how it always goes - regardless of guilt or innocence.
It's possible that French law is right and Google is wrong. It's possible that Google is right and French law is wrong. It's possible that Google is right, French law is right, and the regulators are wrong.
Ya think Google is short on lawyers to test this in court? My opinion is that a lot of people (regulators included) have just awoken up from a Gkoolaid hangover and that may account for the zeal. They feel betrayed and feel like idiots for having bought it. What Google sold as "hip" or "we just want to have fun and change the world" just isn't going any more. Google is just another money hungry, duplicitous company, but with a lot more power. Maybe more power than Microsoft ever had, since Google control e-commerce and advertising. One algo change and your store will be gone, unless you advertise on Google. That's power.
P.S. I suspect that this story will be on page 2 soon, as is common with negative google stories.
The main differences between Google and Microsoft in this case are a) Google's dominant position in a broad series of online services (Microsoft doesn't come close), and b) Google's utterly disrespectful attitude.
The second is what really pisses off regulatory bodies. Google's attitude of "we're right, your stupid foreign laws are wrong, so screw you" is well beyond any arrogance Microsoft ever displayed.
Also, European privacy regulators don't need any publicity stunts. The NSA leaks have pretty much ensured privacy protection is top of the political agenda. Their funding is safe for next decade.
According to the CNIL site the maximum fine is 150,000 Euros, or 300,000 for a repeat offense.
I'm not familiar with the CNIL specifically, but normally this kind of decision would be subject to judicial review if Google felt it merited it. Or they could refuse to pay, in which case the matter would ultimately go to court.
"Define specified and explicit purposes;"
What does this even mean? For every piece of data they have to detail where and how it is used? I don't think any major company could do this reliably.
"Inform users with regard to the purposes of the processing implemented;"
Seems like an extension of the first.
"Define retention periods for the personal data processed;"
Forever, but valid.
"Not proceed, without legal basis, with the potentially unlimited combination of users’ data;"
What? Are they saying that the use of data can never change?
"Fairly collect and process passive users’ data ;"
A good one.
"Inform users and then obtain their consent in particular before storing cookies in their terminal."
Their cookie law is freaking ridiculous so they should probably get their head out of there ass to begin with.
Most of this seems like FUD - are there any companies that have these policies in place currently?
Or if they altered them to be reasonable - knowing what "processes" your data, especially if it's a ton of things, in no way protects your rights as a consumer since most consumers wouldn't understand it anyway.
Google is not "any" company. In light of recent allegations, they collect far too much data for purposes that we don't know. Hence "Define specified and explicit purposes;".
Every user is entitled to know what data a company is storing on them.
29 comments
[ 2.8 ms ] story [ 24.6 ms ] threadFirst, this is about privacy rights. Second, this is an independent agency. Third, it is actually rumored that other equivalent agencies in the EU will take the same kind of measures.
Not to say that Google shouldn't pay taxes like normal businesses do, but this has nothing to do with it.
Not to mention the unrealistic and technically infeasible nature of the demands. The french government are a madman loose in the room. On many levels and issues.
http://www.nytimes.com/2012/10/20/technology/microsoft-expan...
http://marketingland.com/microsoft-privacy-change-google-att...
Please edit your comment to correct the error.
Is it not possible that the answer could be the simplest one, Occam's Razor and all, that Google doesn't want to comply with French privacy law because it interferes with its business model?
Are you new to the world? Or just hopelessly naive?
It's called politics & lobbying.
> Is it not possible that the answer could be the simplest one, Occam's Razor and all, that Google doesn't want to comply with French privacy law because it interferes with its business model?
Occam's Razor doesn't apply here. It never applies to law, because law is not about simple, concise rules of logic. And second, it doesn't apply because your scenario doesn't make any fewer assumptions than other scenarios.
It's possible that French law is right and Google is wrong. It's possible that Google is right and French law is wrong. It's possible that Google is right, French law is right, and the regulators are wrong.
And really all of those are equally likely possibilities.
That is a generic explanation that offers absolutely zero insight about this particular incident. From the article, the regulator waited for 3 months for Google to comply, after which it threatened to impose fines. Any other regulator around the world would have done the same when faced with a company refusing to abide by its laws.
This is how it always goes - regardless of guilt or innocence.
Ya think Google is short on lawyers to test this in court? My opinion is that a lot of people (regulators included) have just awoken up from a Gkoolaid hangover and that may account for the zeal. They feel betrayed and feel like idiots for having bought it. What Google sold as "hip" or "we just want to have fun and change the world" just isn't going any more. Google is just another money hungry, duplicitous company, but with a lot more power. Maybe more power than Microsoft ever had, since Google control e-commerce and advertising. One algo change and your store will be gone, unless you advertise on Google. That's power.
P.S. I suspect that this story will be on page 2 soon, as is common with negative google stories.
The second is what really pisses off regulatory bodies. Google's attitude of "we're right, your stupid foreign laws are wrong, so screw you" is well beyond any arrogance Microsoft ever displayed.
Also, European privacy regulators don't need any publicity stunts. The NSA leaks have pretty much ensured privacy protection is top of the political agenda. Their funding is safe for next decade.
http://www.vincentabry.com/en/new-google-french-headquarters...
What is the recourse that Google would have?
I'm not familiar with the CNIL specifically, but normally this kind of decision would be subject to judicial review if Google felt it merited it. Or they could refuse to pay, in which case the matter would ultimately go to court.
"Google To Be Punished In France For Failing To Pare Back Its Overreaching Privacy Policy"
"Inform users with regard to the purposes of the processing implemented;" Seems like an extension of the first.
"Define retention periods for the personal data processed;" Forever, but valid.
"Not proceed, without legal basis, with the potentially unlimited combination of users’ data;" What? Are they saying that the use of data can never change?
"Fairly collect and process passive users’ data ;" A good one.
"Inform users and then obtain their consent in particular before storing cookies in their terminal." Their cookie law is freaking ridiculous so they should probably get their head out of there ass to begin with.
Most of this seems like FUD - are there any companies that have these policies in place currently?
Remember that CNIL protects user interests.