Euro consumer groups: We think Android tracking is illegal

Pops open can of GDPR beef: Thanks to 'dark patterns' and 'nudging', no doesn't mean no


Seven European consumer organisations have filed a blockbuster complaint arguing that Google's location tracking in Android lacks a valid legal basis in the European Union.

At the heart of the complaint is that the user control of location tracking falls far short of what's required by the union's General Data Protection Regulation (GDPR) – the consent controls are both deceptive and ineffective.

"There is no real option to turn off Location History once it has been enabled; users can only pause it after the Google account has been created," stated the complaint (PDF) led by the Norwegian Consumer Council. "Users who attempt to 'pause' location history receive vague warnings that this will limit some functionalities."

GDPR requires that informed consent must be given without coercion or deception, and that no means no. However, according to the complaint, the design of the application leaves users with little choice but to turn everything on using behavioural deception: "design patterns and biased notices, de facto forcing [the user] to give such consent in the end."

Google data collection can Pause not Wipe

Using a burner Google account on a Pixel 2 XL back in April

Earlier this year the Norwegian Consumer Council published a report on such techniques, called Deceived By Design (PDF).

It examined the notices given by Microsoft, Facebook and Google for "nudges", steering the user to a particular goal, and the data they provided to steer them. This laid the groundwork for today's complaint.

Web and app activity can only be "paused" too, and it's also accompanied by a scary warning that functionality will be inhibited if the user exercises their right to turn off tracking.

The complaint has been made by consumer organisations in Norway, Poland, the Netherlands, Czech Republic, Greece, Slovenia and Sweden.

As the consumer groups explained, the legal basis for data collection has to be clear, and it argued that Google is anything but.

"It is unclear which legal basis Google invokes for personalised advertising (behavioural targeting). Information about which legal basis is used for which purposes, as required by Articles 13 and 14 of the GDPR, is in our opinion not sufficiently specific and clear. This information is not given to the data subject during the Google account setting process neither [sic]."

For example, the complaint has also taken issue with the clarity of the enrolment process. The example of saving the user's Maps history is offered, but then Google has also said it's for personalising advertising.

"At least some of the examples listed by Google should constitute separate individual purposes in themselves. Nevertheless, the user has no freedom but to consent to all of them if she wishes to switch on the feature. For example, if she effectively wants Google to save a map of where she's been, she must also accept the use of her location data for other purposes, including advertising."

Another example is when the user wants to group photos by location. They "can only receive this feature by opting in to full scale location tracking of all their movements by Google and allowing the use of their location data for advertising purposes. The user is presented with a bundled 'take it or leave it' option where there is no real choice. The scenario is similar if the user wants to use Google Assistant."

UXB

Facebook, Microsoft and Google data compliance

Facebook, Microsoft and Google data compliance (Source: Norwegian Consumer Council)

Google's creepy teddy patent

Google now mingles everything you've bought with everywhere you've been

READ MORE

The complaint also tickles the fuse of a long-ticking time bomb buried in GDPR that has not yet detonated.

The complaint added that, according to Recital 43 of the GDPR, consent is not presumed to be valid if there is an asymmetric power relationship between the data subject and controller. The same recital stated that "consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations".

The consumer groups have argued that with Google's dominance of smartphones (>85 per cent market share) there is a "clear imbalance between the data subject and the controller". This echoes similar arguments about Facebook, positing that the entire business model lacks a valid legal basis for data collection.

Google is likely to fight this hard, as it threatens the breakup of a $100bn+ business, but the complaint has been adopted by the formal representative of consumer organisations in the EU, BEUC, so it will need to take it seriously.

At the very least, Google may find a serious makeover of the permission screens through Android is required.

"We're constantly working to improve our controls, and we'll be reading this report closely to see if there are things we can take on board," Google told Reuters. ®

Further reading

Full Report: Every Step You Take – Norwegian Consumer Council (PDF)

Complaint from Norwegian and other consumer councils (PDF) and summary.

Bootnote

Ironically, nudging and "dark patterns" of design were once enthusiastically endorsed by governments, legitimising the techniques of manipulation. The establishment of a "Behavioural Science Unit" at No.10 in 2010 was imitated by Obama's administration after his 2012 re-election success was attributed to "nudge". So who can blame Google? Like a kind government, it only wants what's best for us.


Other stories you might like

  • Google sours on legacy G Suite freeloaders, demands fee or flee

    Free incarnation of online app package, which became Workplace, is going away

    Google has served eviction notices to its legacy G Suite squatters: the free service will no longer be available in four months and existing users can either pay for a Google Workspace subscription or export their data and take their not particularly valuable businesses elsewhere.

    "If you have the G Suite legacy free edition, you need to upgrade to a paid Google Workspace subscription to keep your services," the company said in a recently revised support document. "The G Suite legacy free edition will no longer be available starting May 1, 2022."

    Continue reading
  • SpaceX Starlink sat streaks now present in nearly a fifth of all astronomical images snapped by Caltech telescope

    Annoying, maybe – but totally ruining this science, maybe not

    SpaceX’s Starlink satellites appear in about a fifth of all images snapped by the Zwicky Transient Facility (ZTF), a camera attached to the Samuel Oschin Telescope in California, which is used by astronomers to study supernovae, gamma ray bursts, asteroids, and suchlike.

    A study led by Przemek Mróz, a former postdoctoral scholar at the California Institute of Technology (Caltech) and now a researcher at the University of Warsaw in Poland, analysed the current and future effects of Starlink satellites on the ZTF. The telescope and camera are housed at the Palomar Observatory, which is operated by Caltech.

    The team of astronomers found 5,301 streaks leftover from the moving satellites in images taken by the instrument between November 2019 and September 2021, according to their paper on the subject, published in the Astrophysical Journal Letters this week.

    Continue reading
  • AI tool finds hundreds of genes related to human motor neuron disease

    Breakthrough could lead to development of drugs to target illness

    A machine-learning algorithm has helped scientists find 690 human genes associated with a higher risk of developing motor neuron disease, according to research published in Cell this week.

    Neuronal cells in the central nervous system and brain break down and die in people with motor neuron disease, like amyotrophic lateral sclerosis (ALS) more commonly known as Lou Gehrig's disease, named after the baseball player who developed it. They lose control over their bodies, and as the disease progresses patients become completely paralyzed. There is currently no verified cure for ALS.

    Motor neuron disease typically affects people in old age and its causes are unknown. Johnathan Cooper-Knock, a clinical lecturer at the University of Sheffield in England and leader of Project MinE, an ambitious effort to perform whole genome sequencing of ALS, believes that understanding how genes affect cellular function could help scientists develop new drugs to treat the disease.

    Continue reading

Biting the hand that feeds IT © 1998–2022