Advertisement

Google agrees to pay nearly $392 million in a record privacy settlement

A building with the Google logo on it.
Google agreed to the settlement with 40 states after an investigation found that the company tracked people’s location data even after they opted out of such tracking.
(Associated Press)
Share via

Search giant Google has agreed to a $391.5-million settlement with 40 states to resolve an investigation into how the company tracked users’ locations, state attorneys general announced Monday.

The investigation by the states, which officials said was spurred by a 2018 Associated Press story, found that Google continued to track people’s location data even after they opted out of such tracking.

The attorneys general called the settlement a historic win for consumers, and the largest multistate settlement in U.S. history dealing with privacy.

Advertisement

It comes at a time of mounting unease over privacy and surveillance by tech companies that has drawn growing outrage from politicians and scrutiny by regulators. The Supreme Court’s ruling in June ending the constitutional protections for abortion raised potential privacy concerns for women seeking the procedure or related information online.

“For years Google has prioritized profit over their users’ privacy,” said Oregon Atty. Gen. Ellen Rosenblum, who headed the case with Nebraska’s attorney general. “They have been crafty and deceptive. Consumers thought they had turned off their location tracking features on Google, but the company continued to secretly record their movements and use that information for advertisers.”

Google, based in Mountain View, Calif., said it fixed the problems several years ago.

“Consistent with improvements we’ve made in recent years, we have settled this investigation which was based on outdated product policies that we changed years ago,” spokeperson José Castañeda said.

Advertisement

California, which is one of the few states to enact its own data privacy laws, wasn’t among the states joining in the investigation and settlement.

Elon Musk’s track record as a boss is an endless scroll of impulse firings, retribution, tone-deafness on race — and the impregnation of a subordinate.

Location tracking can help tech companies sell digital ads to marketers looking to connect with consumers within their vicinity. It’s another tool in a data-gathering toolkit that generates more than $200 billion in annual ad revenue for Google, accounting for most of the profits pouring into the coffers of its corporate parent, Alphabet — which has a market value of $1.2 trillion.

In its 2018 story, AP reported that many Google services on Android devices and iPhones store users’ location data even if they’ve used a privacy setting that says it will prevent Google from doing so. Computer-science researchers at Princeton confirmed these findings at the AP’s request.

Advertisement

Storing such data carries privacy risks and has been used by police to determine the location of suspects.

AP reported in 2018 that the privacy issue with location tracking affected some 2 billion users of devices that run Google’s Android operating software and hundreds of millions of worldwide iPhone users who rely on Google for maps or search.

The attorneys general who investigated Google said a key part of the company’s digital advertising business is location data, which they called the most sensitive and valuable personal data the company collects. Even a small amount of location data can reveal a person’s identity and routines, they said. Google uses the location information to target consumers with ads by its customers, the state officials said.

The attorneys general said Google misled users about its location tracking practices since at least 2014, violating state consumer protection laws.

Amid Twitter layoffs and uncertainty about toxic content, privacy and security, some users are concerned and looking for alternatives.

As part of the settlement, Google also agreed to make those practices more transparent to users. That includes showing them more information when they turn location account settings on and off and keeping a webpage that gives users information about the data Google collects.

The shadowy surveillance brought to light by AP troubled even some Google engineers, who recognized the company might be confronting a massive legal headache after the story was published, according to internal documents that have subsequently surfaced in consumer-fraud lawsuits.

Advertisement

Arizona Atty. Gen. Mark Brnovich filed the first state action against Google in May 2020, alleging that the company had defrauded its users by misleading them into believing they could keep their whereabouts private by turning off location tracking in the settings of their software.

In addition to Oregon and Nebraska, the other states involved are Arkansas, Florida, Illinois, Louisiana, New Jersey, North Carolina, Pennsylvania and Tennessee. The settlement is also joined by Alabama, Alaska, Colorado, Connecticut, Delaware, Georgia, Hawaii, Idaho, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Nevada, New Mexico, New York, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Utah, Vermont, Virginia and Wisconsin.

Advertisement