Proposed Consent Agreement In the Matter Google, Inc. (Google Buzz), File No. 1023136 #00310 

Submission Number:
Marie Georges
Initiative Name:
Proposed Consent Agreement In the Matter Google, Inc. (Google Buzz), File No. 1023136
To the FTC, I am submitting this comment on the proposed consent order, In the Matter of Google Inc., File No. 1023136, between the FTC and Google. The consent order comes as a result of the complaint filed by the Electronic Privacy Information Center ("EPIC") regarding the privacy breach to Gmail users caused by Google Buzz. The FTC complaint, which draws heavily on the complaint EPIC filed with the agency, alleges that Google employed unfair and deceptive practices when it launched the Google Buzz social networking service. I strongly support the FTC settlement agreement, which applies to all Google products and services, including Gmail and Google Buzz. It bans Google from misrepresenting its privacy policies in the future, requires independent privacy audits every two-years for the next 20 years, and requires that Google institute a comprehensive privacy program to safeguard its users data and personal information. As part of the Comprehensive Privacy Program, the FTC should require Google to: - Limit data retention to the minimum time necessary for the purpose of each service - Routinely encrypt all cloud-based services (Gmail, Docs, etc.) - Not disclose user data to law enforcement without a warrant - Allow users to use Google services anonymously - Stop behavioral profiling of Internet users - Limit Google's use of a web site's Analytics data - Not require Google Accounts for Android phones - Not track Android users without explicit permission - Be transparent as to what data it collects on users - Allow users to control the information Google collects on them - Encrypt all Gmail to Gmail emails and chats using open standards like pgp - Refrain from offering facial recognition services And in particular - Not use data obtained from a user in one service for another (privacy and competition matters) - Not keep without free consent the content of search requests after end of a session (freedom of information). When those data are kept with consent, this consent should be able to be withdrawn at any time in an easy manner. No retention of any data for more than 3 month in any case - Not publish people and car pictures without concerned persons' consent (privacy, right to move freely), house's map without the owners and residents' consent (security matter). - Ask FTC for an agreement before implementing any new identifiable data processing for a new kind of purpose or service (independent audit every two years is to long as regards to the speed of evolutions