Google takes sole stand on privacy, rejects new rules for fear of 'authoritarian' review

Lone 'no' vote nixes renewal of W3C's Privacy Interest Group


Google has blocked a proposed revision of the charter of the Privacy Interest Group (PING), a part of the W3C web standards body, over concerns that establishing an unchecked "authoritarian review group" will create "significant unnecessary chaos in the development of the web platform."

The PING's job is to ensure that technical specifications recommended by the W3C respect the privacy of people using the web. The group does so by providing a "horizontal review," in which members make suggestions to the authors of technical specifications to ensure the web tech being developed takes privacy into account.

The group, which currently counts 68 participants, has been trying to adjust the agreed terms under which it operates.

In June, PING polled the 450 or so W3C members about the proposed new charter. Voting closed on August 4th. According to an individual familiar with situation, only 26 W3C members responded and Google alone among them objected. Because the group requires unanimous consensus, the new charter was not adopted.

A copy of Google's formal objection was posted to the PING mailing list on Monday. "Although we would like the PING to take a strong role in horizontal review, we are uncomfortable investing it with Process authority without more experience," Google's note says.

Shortly thereafter, Chris Wilson, a project manager at Google and W3C participant, posted a follow-up message to add additional context, presumably out of concern that Google's objection might be read as hostility to privacy.

"To be clear: Google does NOT have concerns about the PING reviewing web platform specifications," he said. "...We do have slight concerns about the additional workload that might entail for the PING group, but we have been actively working to increase our participation in the PING to help account for that."

The new charter isn't all that different from the current one. Nick Doty, a privacy researcher and doctoral student at UC Berkeley's School of Information and a PING member, provided The Register with a diff to compare the two documents.

"The new charter is not dramatically different from the existing one," Doty said in an email. "It includes providing input and recommendations to other groups that set process, conduct reviews or approve the progression of standards and mentions looking at existing standards and not just new ones. I think those would all have been possible under the old charter (which I drafted originally); they’re just stated more explicitly in this draft. It includes a new co-chair from Brave, in addition to the existing co-chairs from the Internet Society and Google."

Doty said he's not surprised there would be discussion and disagreement about how to conduct horizontal spec reviews. "I am surprised that Google chose to formally object to the continued existence of this interest group as a way to communicate those differences," he said.

"I don’t know why Google representatives chose to object to this charter, but I do hope the now expressed interest in reviews and the deliverables of the Interest Group will lead to more investment in PING and in Web privacy."

As The Register has heard, the issue for Google is that more individuals are participating in PING and there's been some recent pushback against work in which Google has been involved. In other words, a formerly cordial group has become adversarial.

The required context here is that over the past few years, a broad consensus has been building around the need to improve online privacy. Back in 2014, not long after Edward Snowden's revelations about the scope of online surveillance transformed the privacy debate, the Internet Engineering Task Force published an RFC declaring that pervasive monitoring is an attack on privacy. That concern has become more widespread and has led to legislation like the California Consumer Privacy Act (opposed by Google) and efforts by companies like Apple, Brave, and Mozilla to improve privacy by blocking ad tracking.

A group of happy corporate looking types celebrate

The results are in… and California’s GDPR-ish digital privacy law has survived onslaught by Google and friends

READ MORE

"The strategic problem for Google, with Apple, Brave, Mozilla, Samsung all blocking tracking, is how to preserve their business advantages and share price while appearing to be 'pro privacy,'" said Brendan Eich, CEO of Brave, in a message to The Register.

Facing efforts to block browser fingerprinting and change the way HTTP cookies work, the ad biz last month floated a set of proposals to address privacy concerns without starving advertisers of cookie data. The company's "Privacy Sandbox" met with mixed reviews from privacy groups and academics, who characterized Google's claims about the privacy risks of cookie blocking as "privacy gaslighting."

Eich expressed skepticism of Google’s prioritizing a formal privacy model before the PING could review other specifications for privacy problems, in light of real privacy protections already in browsers that need standardization, and of the lack of formal models gating progress elsewhere in the W3C.

"The W3C is obligated to help fix interoperation problems these privacy protections create, at a minimum; engineering in better privacy over time is even better, but interop is enough of a justification, and no 'utopia first! then we can solve lesser problems' objections should be tolerated," he said.

The Register asked Google for comment. We've not heard back. ®

Broader topics


Other stories you might like

  • FTC urged to probe Apple, Google for enabling ‘intense system of surveillance’
    Ad tracking poses a privacy and security risk in post-Roe America, lawmakers warn

    Democrat lawmakers want the FTC to investigate Apple and Google's online ad trackers, which they say amount to unfair and deceptive business practices and pose a privacy and security risk to people using the tech giants' mobile devices.

    US Senators Ron Wyden (D-OR), Elizabeth Warren (D-MA), and Cory Booker (D-NJ) and House Representative Sara Jacobs (D-CA) requested on Friday that the watchdog launch a probe into Apple and Google, hours before the US Supreme Court overturned Roe v. Wade, clearing the way for individual states to ban access to abortions. 

    In the days leading up to the court's action, some of these same lawmakers had also introduced data privacy bills, including a proposal that would make it illegal for data brokers to sell sensitive location and health information of individuals' medical treatment.

    Continue reading
  • Google has more reasons why it doesn't like antitrust law that affects Google
    It'll ruin Gmail, claims web ads giant

    Google has a fresh list of reasons why it opposes tech antitrust legislation making its way through Congress but, like others who've expressed discontent, the ad giant's complaints leave out mention of portions of the proposed law that address said gripes.

    The law bill in question is S.2992, the Senate version of the American Innovation and Choice Online Act (AICOA), which is closer than ever to getting votes in the House and Senate, which could see it advanced to President Biden's desk.

    AICOA prohibits tech companies above a certain size from favoring their own products and services over their competitors. It applies to businesses considered "critical trading partners," meaning the company controls access to a platform through which business users reach their customers. Google, Apple, Amazon, and Meta in one way or another seemingly fall under the scope of this US legislation. 

    Continue reading
  • Brave Search leaves beta, offers Goggles for filtering, personalizing results
    Freedom or echo chamber?

    Brave Software, maker of a privacy-oriented browser, on Wednesday said its surging search service has exited beta testing while its Goggles search personalization system has entered beta testing.

    Brave Search, which debuted a year ago, has received 2.5 billion search queries since then, apparently, and based on current monthly totals is expected to handle twice as many over the next year. The search service is available in the Brave browser and in other browsers by visiting search.brave.com.

    "Since launching one year ago, Brave Search has prioritized independence and innovation in order to give users the privacy they deserve," wrote Josep Pujol, chief of search at Brave. "The web is changing, and our incredible growth shows that there is demand for a new player that puts users first."

    Continue reading

Biting the hand that feeds IT © 1998–2022