Google Ordered To Pay $391m To Settle Privacy Violations

Google will pay $391.5m (£330m) to settle allegations about how it collects data from users as the technology giant aims to resolve allegations that it misled consumers about how it tracked, recorded and shared their device location data. It is the largest privacy-related multi-state settlement in US history

The penalty payment comes after Texas, Indiana, Washington and the District of Columbia took collective legal action against Google in January this year. 

Google has admitted that it tracked the location of users who opted out of location services on their devices across 40 US states and has been told to be transparent about location tracking in the future and develop a web page telling people about the data it collects. 

Knowing a user's location helps advertisers target products location services help Google generate $200bn in annual advertising revenue.

Jose Castaneda, Google spokesperson said, "Consistent with improvements we've made in recent years, we have settled this investigation, which was based on outdated product policies that we changed years ago." Google has already agreed to pay Arizona $85m over similar issues concerning how it collects location data and there remains one outstanding case on the topic in the US courts. 

Oregon Attorney General Ellen Rosenblum, who led the case, alongside Nebraska Attorney General Doug Peterson, said: "For years Google has prioritised profit over its users' privacy. It has been crafty and deceptive...  
Consumers thought they had turned off their location-tracking features on Google - but the company continued to secretly record their movements and use that information for advertisers."

The attorneys general said Google had been misleading consumers about location tracking since at least 2014, breaking state consumer-protection laws. The company has been told to significantly improve user controls and the way it discloses location tracking, starting from 2023.

Google:    Reuters:    BBC:       GovTech:   FBCNews:     Security Affairs

You Might Also Read: 

Google Loses Its Appeal & Must Pay €4.1Billion EU Penalty:
 

« Four Reasons You Need RASP Security For Web Applications
How To Become A Cyber Millionaire »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

GrammaTech

GrammaTech

GrammaTech is a leading developer of software-assurance tools and advanced cyber-security solutions.

Cyber 2.0

Cyber 2.0

Cyber 2.0 is the only system in the world that blocks all forms of cyber attack within the organization, including new and unfamiliar attack methods.

Sungard Availability Services (Sungard AS)

Sungard Availability Services (Sungard AS)

Sungard AS partners with customers around the globe to understand their unique business needs and provide production and recovery services tailored to their requirements.

totemo

totemo

Totemo offers solutions for the secure exchange of business information.

Metro Systems

Metro Systems

Metro Systems offer fully integrated IT solutions & services covering Digital Transformation, Digital Infrastructure, Cyber Security and Training.

CSIRT-NQN

CSIRT-NQN

CSIRT-NQN is the Computer Incident Response Team for the Argentine province of Neuquen.

Callsign

Callsign

Callsign’s mission is to seamlessly power the identification of every web, mobile and physical interaction.

GRSi

GRSi

GRSi deliver next-generation systems engineering, cybersecurity, technology insertion and best practices-based Enterprise Operations (EOps) management.

Precursor Security

Precursor Security

Precursor Security are information security specialist, delivering all aspects of Security testing, Cyber Risk Management, and Continuous Security Testing.

Real Protect

Real Protect

Real Protect is a Brazilian provider of managed security (MSS) and cyber defense services.

Infostream

Infostream

Infostream is a leading integrator of Digital Transformations Solutions (DTS); Public, Private, and Hybrid Cloud; Cybersecurity; Data Integrity; DevOps, DevSecOps, and Infrastructures.

Kingston Technology

Kingston Technology

Kingston is a leading global manufacturer of memory and storage solutions including encrypted storage solutions to protect data inside and outside the firewall.

Cranium

Cranium

AI is being implemented into every business process, but nobody knows whether their AI is secure. Our mission is to deliver security and trust to the AI revolution.

NORMA Cyber

NORMA Cyber

NORMA Cyber delivers centralised cyber security services to Norwegian shipowners and other entities within the Norwegian maritime sector.

RapidFort

RapidFort

RapidFort’s Software Attack Surface Optimization Platform remediates 95% of software vulnerabilities in minutes without code changes.

Blackwire Labs

Blackwire Labs

Blackwire.ai is the first multidisciplinary cybersecurity advisor, powered by AI and trained by cybersecurity experts to enhance your team's capabilities and improve resilience.