this post was submitted on 09 Jun 2024
51 points (98.1% liked)

Privacy

4211 readers
17 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] other_cat@lemmy.world 3 points 5 months ago

Paywalled. Here's the article via the Universal Summarizer by Kagi.

  • Google has experienced thousands of privacy incidents and security issues over a 6-year period from 2013 to 2018, according to an internal database obtained by 404 Media.
  • The privacy incidents range from small issues like a single errant email containing personal information to substantial data leaks and impending raids on Google offices.
  • The incidents involve Google's own products, data collection practices, vulnerabilities in third-party vendors, and mistakes made by Google staff, contractors, or others impacting Google systems.
  • The incidents include Google accidentally collecting children's voice data, leaking the trips and home addresses of carpool users, and making YouTube recommendations based on users' deleted watch history.
  • While individually the incidents may have only impacted a relatively small number of people, or were fixed quickly, collectively they show how a powerful company like Google manages and often mismanages a large amount of sensitive personal data.
  • Google employees internally report these privacy and security issues, assigning them priority ratings from P0 (highest) to P1.
  • The database obtained by 404 Media contains thousands of reports of these incidents over the 6-year period.
  • The revelations highlight the challenges major tech companies face in protecting user privacy and data, even with internal reporting systems.
  • The incidents suggest Google may not always be fully transparent about privacy and security issues impacting its users.
  • The article suggests the need for greater scrutiny and accountability around how large tech companies like Google handle sensitive user data.