Google Ordered To Pay $391m To Settle Privacy Violations

Google will pay $391.5m (£330m) to settle allegations about how it collects data from users as the technology giant aims to resolve allegations that it misled consumers about how it tracked, recorded and shared their device location data. It is the largest privacy-related multi-state settlement in US history

The penalty payment comes after Texas, Indiana, Washington and the District of Columbia took collective legal action against Google in January this year. 

Google has admitted that it tracked the location of users who opted out of location services on their devices across 40 US states and has been told to be transparent about location tracking in the future and develop a web page telling people about the data it collects. 

Knowing a user's location helps advertisers target products location services help Google generate $200bn in annual advertising revenue.

Jose Castaneda, Google spokesperson said, "Consistent with improvements we've made in recent years, we have settled this investigation, which was based on outdated product policies that we changed years ago." Google has already agreed to pay Arizona $85m over similar issues concerning how it collects location data and there remains one outstanding case on the topic in the US courts. 

Oregon Attorney General Ellen Rosenblum, who led the case, alongside Nebraska Attorney General Doug Peterson, said: "For years Google has prioritised profit over its users' privacy. It has been crafty and deceptive...  
Consumers thought they had turned off their location-tracking features on Google - but the company continued to secretly record their movements and use that information for advertisers."

The attorneys general said Google had been misleading consumers about location tracking since at least 2014, breaking state consumer-protection laws. The company has been told to significantly improve user controls and the way it discloses location tracking, starting from 2023.

Google:    Reuters:    BBC:       GovTech:   FBCNews:     Security Affairs

You Might Also Read: 

Google Loses Its Appeal & Must Pay €4.1Billion EU Penalty:
 

« Four Reasons You Need RASP Security For Web Applications
How To Become A Cyber Millionaire »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

CyTech Services

CyTech Services

CyTech provides Forensics Incident Response, Cyber Security and Training services.

UpGuard

UpGuard

UpGuard's discovery engine brings visibility to complex IT environments, enabling teams to identify risk, confirm compliance and make business safer.

Momentum

Momentum

The Cyber Security team at Momentum offers a professional and specialist recruitment service across Cyber & IT Security.

Secardeo

Secardeo

Secardeo is a provider of corporate solutions using digital signatures and certificates. Our solutions enable the user transparent end-to-end encryption of e-mails between organizations.

Lynx Technology Partners

Lynx Technology Partners

Lynx Technology Partners is a full service, full life-cycle risk-based security consulting firm.

ShadowDragon

ShadowDragon

ShadowDragon develops digital tools that simplify the complexities of modern investigations that involve multiple online environments and technologies.

National Cyber Security Centre (NCSC) - New Zealand

National Cyber Security Centre (NCSC) - New Zealand

The role of the NCSC is to help New Zealand’s most significant public and private sector organisations to protect their information systems from advanced cyber-borne threats.

BigWeb Technologies

BigWeb Technologies

BigWeb Technologies is dedicated to provide its clients with ICT related services including Infrastructure Solutions, Consultancy and Security.

Incognito Forensic Foundation Lab (IFF Lab)

Incognito Forensic Foundation Lab (IFF Lab)

IFF Lab is a premier cyber and digital forensics lab in India that offers forensic services and solutions, cyber security analysis and assessment, IT support, training and consultation.

RiskXchange

RiskXchange

RiskXchange's cybersecurity risk rating solution helps businesses solve complex cybersecurity and compliance challenges by providing a 360-degree view of your cybersecurity posture.

InferSight

InferSight

InferSight can help you design an architecture that takes into account security, performance, availability, functionality, resiliency and future capacity to avoid technological lock in and limitations

Componolit

Componolit

Componolit GmbH is a highly specialized company with a strong emphasis on trustworthy software, component-based systems and formal verification.

SolidRun

SolidRun

SolidRun is a leading provider of computing and network technology designed to streamline the deployment of edge computing infrastructure and support embedded and IoT markets.

Ghost Security

Ghost Security

Ghost is a venture backed, product-led startup building the new standard in application security for the modern enterprise.

KYND

KYND

KYND has created pioneering cyber risk technology that makes assessing, understanding, and managing business cyber risks easier and quicker than ever before.

Arctic Group

Arctic Group

Arctic Group is a Swedish service provider focusing on cybersecurity, integration services and deployment of software development tools.