Not sure which news website I should be using for the link, sorry! I’m happy to change it if anyone has a better one.

Google agreed to destroy or de-identify billions of records of web browsing data collected when users were in its private browsing “Incognito mode,” according to a proposed class action settlement filed Monday.

The proposal is valued at $5 billion, according to Monday’s court filing, calculated by determining the value of data Google has stored and would be forced to destroy and the data it would be prevented from collecting. Google would need to address data collected in private browsing mode in December 2023 and earlier. Any data that is not outright deleted must be de-identified.

  • NaibofTabr@infosec.pub
    link
    fedilink
    English
    arrow-up
    66
    arrow-down
    1
    ·
    7 months ago

    Hmm, it is nice to see an outcome from a lawsuit that is practical and not just a cost-of-doing-business fine.

    But “de-identify” doesn’t inspire a lot of confidence… anonymized data can be de-anonymized pretty easily most of the time. Also have they kept accurate internal records on all the places pieces of that data have gone inside their various projects and systems? Who would be capable of verifying that it had all been deleted?