Google to change privacy policy after ICO investigation

The ICO has required Google to sign a formal undertaking to improve the information it provides to people about how it collects personal data in the UK after concerns were raised around changes to the company’s privacy policy.

  • 9 years ago Posted in

The ICO found that the search engine was too vague when describing how it uses personal data gathered from its web services and products.

Google introduced a new privacy policy in March 2012 combining around 70 existing policies for various services, but the ICO ruled that the new policy did not include sufficient information for service users as to how and why their personal data was being collected.

Google has now signed an undertaking committing to make further changes to the privacy policy to ensure it meets the requirements of the Data Protection Act and to take steps to ensure that future changes to its privacy policy comply, including user testing.

Whilst conducting its own investigation, the ICO has worked with other European Data Protection Authorities, as part of the Article 29 working party.

Steve Eckersley, Head of Enforcement at the ICO, said: “This undertaking marks a significant step forward following a long investigation and extensive dialogue. Google’s commitment today to make these necessary changes will improve the information UK consumers receive when using their online services and products.
“Whilst our investigation concluded that this case hasn’t resulted in substantial damage and distress to consumers, it is still important for organisations to properly understand the impact of their actions and the requirement to comply with data protection law. Ensuring that personal data is processed fairly and transparently is a key requirement of the Act.

"This investigation has identified some important learning points not only for Google, but also for all organisations operating online, particularly when they seek to combine and use data across services. It is vital that there is clear and effective information available to enable users to understand the implications of their data being combined. The detailed agreement Google has signed setting out its commitments will ensure that.”

The ICO has already worked with Google to ensure a significant number of changes to the policy. The search engine must now make the agreed further changes by 30 June 2015 and take further steps over the next two years.

The ICO plans to update its Privacy Notices Code Practice later 2015 to provide organisations with further guidance about how to provide effective privacy information, particularly in online and mobile environments.
 

New state-of-the-art data centre features Vultr’s first AMD GPU supercompute cluster.
Only a quarter (25%) think their approach to the cloud is carefully considered and successful.
Moving to AWS Cloud will enable The Co-operative Bank to adopt cutting edge IT Infrastructure.
The global airline group will upgrade the value of its data and get its AI & generative AI ready...
Barracuda Networks’s award-winning Email Protection and Cloud Backup security solutions will be...
Leading company in renewables to leverage HPE’s unique turnkey AI infrastructure solution to...
The four-year project extension focuses on cloud transformation and enhanced operational efficiency...
Businesses in the UK are risking slower development as they fail to fully embrace technologies that...