Skip to main content

Privacy Group: Google “Spied” On Students Using Chromebooks & Apps For Education


The San Francisco-based non-profit Electronic Frontier Foundation (EFF) filed a complaint with the Federal Trade Commission (FTC) that says Google collected personal information and internet usage behavior of students using Chromebooks and Google Apps for Education beyond what is allowed for educational purposes in violation of the Student Privacy Pledge.

EFF says the Privacy Pledge is a legally binding and FTC-enforceable agreement. The organization further argues that Google’s conduct (unauthorized data collection) “constitutes unfair or deceptive acts or practices in violation of Section 5 of the Federal Trade Commission Act (15 U.S.C. § 45).” The organization has asked the FTC to investigate and issue an injunction against the activity, which Google told EFF would stop.

Below are EFF’s top-level factual allegations against Google:

  • Google collects, maintains, and uses records of essentially everything that student users of Google for Education do on Google services, while they are logged in to their Google accounts . . . This includes recording students’ browsing behavior on every single Google-operated site students visit regardless of its relation to schoolwork . . . Such data reveals highly personal information about students and is not necessary to deliver educational services.
  • The “Chrome Sync” feature is enabled by default on all Chromebook devices . . . For a non-educational user of Chrome Sync, the information collected about browsing history and bookmarks, along with information collected through Gmail and other Google applications, is used to create an individualized user profile for targeted advertising. Google asserts that it does not collect information from student users of Google for Education for advertising purposes . . .Google has acknowledged that it collects, maintains, and uses student information via Chrome Sync (in aggregated and anonymized form) for the purpose of improving Google products, similar to how Google uses browsing data collected within its own services
  • Google’s design choice permits school administrators to enable impermissible collection of student data, even if some parents make an informed choice to turn it off, thereby placing Chrome for Education outside the bounds of the Student Privacy Pledge.
  • In the same settings page where administrators can choose whether Google can collect a user’s passwords or browsing history, school administrators can also choose whether “websites are allowed to track the user’s [here, students’] physical location.” . . . Sharing a student’s physical location with third parties is unquestionably sharing personal information beyond what is needed for educational purposes . .

(Emphasis added.)

Taken together these Google data collection activities are “unfair and deceptive” practices under federal law because EFF says they violate the Student Privacy Pledge to which Google is a signatory. The Pledge is a statement that signatories will:

  • Not sell student information
  • Not behaviorally target advertising
  • Use data for authorized education purposes only
  • Not change privacy policies without notice and choice
  • Enforce strict limits on data retention
  • Support parental access to, and correction of errors in, their children’s information
  • Provide comprehensive security standards
  • Be transparent about collection and use of data

In its request for injunction and other relief, EFF asks the FTC to order Google to destroy the student data, notify parents and students of the prior data collection and prevent Google from capturing such data and usage behavior in the future:

  • Order Google to destroy ALL personal student information collected by Google, without student or parent authorization, that is not necessary for educational purposes associated with ALL Google for Education student accounts (browsing history, passwords, tabs, bookmarks, etc.)
  • Order Google to, prior to destroying any personal student information not necessary for educational purposes, provide all student account holders and, as is reasonably feasible, all parents, notice of Google’s previous collection and use of student personal information in violation of the Student Privacy Pledge;
  • Enjoin Google from collecting, maintaining, using, or sharing any personal student information not necessary for educational purposes (including in aggregated or anonymized form), without student or parent authorization, as long as it remains a signatory to the Student Privacy Pledge
  • Other remedies and relief at the FTC’s discretion

The FTC can impose fines to varying degrees but its greatest power is to enjoin or prohibit activities deemed deceptive or unfair. As a practical matter, Google’s exposure in this case is not so much about fines but about its brand reputation and image.

The perception of Google among school administrators, teachers and parents could be tarnished depending on how widely publicized the case is. Indeed, the data mining allegations could make schools think twice before adopting Chromebooks and Google educational or cloud services. While the latter could have some revenue implications, Google’s reputation and usage with the broader-public are unlikely to suffer.

Despite the allegations it’s not yet clear whether there was willful behavior on Google’s part or whether this was more a failure of internal communications and oversight.

via Marketing Land


Popular posts from this blog

How to Get SMS Alerts for Gmail via Twitter

How do you get SMS notifications on your mobile phone for important emails in your Gmail? Google doesn’t support text notifications for their email service but Twitter does. If we can figure out a way to connect our Twitter and Gmail accounts, the Gmail notifications can arrive as text on our mobile via Twitter. Let me explain:Twitter allows you to follow any @user via a simple SMS. They provide short codes for all countries (see list) and if you text FOLLOW to this shortcode following by the  username, any tweets from that user will arrive in your phone as text notifications. For instance, if you are in the US, you can tweet FOLLOW labnol to 40404 to get my tweets as text messages. Similarly, users in India can text FOLLOW labnol to 9248948837 to get the tweets via SMS.The short code service of Twitter can act as a Gmail SMS notifier. You create a new Twitter account, set the privacy to private and this account will send a tweet when you get a new email in Gmail. Follow this account …

Instagram Story links get 15-25% swipe-through rates for brands, publishers

Instagram may arrived late as a traffic source for brands and publishers, but it’s already showing early signs of success, driving new visitors to their sites and even outperforming its parent company, Facebook.For years brands, publishers and other have tried to push people from the Facebook-owned photo-and-video-sharing app to their sites. Outside of ads and excepting a recent test with some retailers, Instagram didn’t offer much help to companies looking to use it to drive traffic. So they had to find workarounds. They put links in their Instagram bios. They scrawled short-code URLs onto their pictures. And they typed out links in their captions.Then last month Instagram finally introduced an official alternative to these hacky workarounds: the ability for verified profiles to insert links in their Instagram Stories.Almost a month after the launch, 15% to 25% of the people who see a link in an Instagram Story are swiping on it, according to a handful of brands and publishers that h…

Five great tools to improve PPC ads

Every digital marketer wants to reach the top position on the search engine results. However, if you’ve recently launched a new website or your niche is saturated, starting with paid search ads sounds like a good idea.Strategically created PPC campaigns can drive leads, sales or sign-ups to your websites. You know what? In fact, businesses earn an average of $8 for every dollar they spend on Google Ads.Optimizing PPC campaigns is not easy, but it’s very powerful if you do it properly. Just like SEO, it is essential to conduct extensive keyword research, optimize ad copy, and design high-converting landing pages.Fortunately, there are a lot of effective PPC tools that will help you analyze your competitors’ PPC strategies, figure out tricks in their campaigns, and improve your PPC campaigns.If you are ready to take an evolutionary leap in your PPC advertising, take a look at my list of five amazing tools to save you time, give you crucial insights, and raise money for your business.Fiv…