Google’s FTC-Mandated Privacy Assessments

“A dashboard with resources on third party management for Googlers” (from the 2018 report)


NEW PDF: “Independent Assessor’s Report on Google’s Privacy Program” (2016-2018)
PDF: “Independent Assessor’s Report on Google’s Privacy Program” (2014-2016)
PDF: Yearly updates on Google’s compliance with FTC’s order (2015-2017)

{Exclusive} When Google got into trouble with the Federal Trade Commission over its privacy practices in 2010-2011, it was ordered to implement a new privacy program.

The settlement order requires Google to hire an outside firm to assess its privacy practices every two years. The FTC posted the first such report (from 2014) but no others. Under FOIA, I requested all such assessments since then and received the 2016 report, posted above. (The 2018 report hasn’t yet been completed.) UPDATE {Sept 20, 2018}: I filed a new request for the 2018 report and received it. Posted above.

Google is also required to provide a yearly update on its compliance with the FTC’s order. The FTC posted the initial compliance report and the first two yearly updates but none since then. I’m posting three more updates above. UPDATE {Sept 20, 2018}: I also re-requested the 2018 compliance update but it hasn’t been received by the FTC.

More documents:

• FTC page for “In the Matter of Google, Inc.

FTC complaint

FTC decision and order

• FTC press release: “FTC Gives Final Approval to Settlement with Google over Buzz Rollout

“The settlement resolves charges that Google used deceptive tactics and violated its own privacy promises to consumers when it launched its social network, Google Buzz, in 2010. The agency alleged that the practices violate the FTC Act. The settlement bars the company from future privacy misrepresentations, requires it to implement a comprehensive privacy program, and calls for regular, independent privacy audits for the next 20 years.”

• 90-day report on Google’s compliance with the FTC order [FTC] [searchable version: AltGov2]

• Yearly updates on the above 90-day compliance report (2013-2014) [FTC] [searchable version: AltGov2]

• “Initial Assessment Report on Google’s Privacy Program” (2011-2012) [FTC] [searchable version: AltgGov2]

• First biennial “Independent Assessor’s Report on Google’s Privacy Program” (2012-2014) [FTC] [searchable version: AltGov2]



Simple Share Buttons
Simple Share Buttons