• @other_cat
    link
    English
    37 months ago

    Paywalled. Here’s the article via the Universal Summarizer by Kagi.

    • Google has experienced thousands of privacy incidents and security issues over a 6-year period from 2013 to 2018, according to an internal database obtained by 404 Media.
    • The privacy incidents range from small issues like a single errant email containing personal information to substantial data leaks and impending raids on Google offices.
    • The incidents involve Google’s own products, data collection practices, vulnerabilities in third-party vendors, and mistakes made by Google staff, contractors, or others impacting Google systems.
    • The incidents include Google accidentally collecting children’s voice data, leaking the trips and home addresses of carpool users, and making YouTube recommendations based on users’ deleted watch history.
    • While individually the incidents may have only impacted a relatively small number of people, or were fixed quickly, collectively they show how a powerful company like Google manages and often mismanages a large amount of sensitive personal data.
    • Google employees internally report these privacy and security issues, assigning them priority ratings from P0 (highest) to P1.
    • The database obtained by 404 Media contains thousands of reports of these incidents over the 6-year period.
    • The revelations highlight the challenges major tech companies face in protecting user privacy and data, even with internal reporting systems.
    • The incidents suggest Google may not always be fully transparent about privacy and security issues impacting its users.
    • The article suggests the need for greater scrutiny and accountability around how large tech companies like Google handle sensitive user data.