Google Now Required to Disclose Which Services Process User Data After Losing Data Privacy Lawsuit
In a court ruling, Google faces consequences for violating data protection laws - Tech giant Google loses court battle over privacy concerns
Let's dive into the deets!
In a groundbreaking decision by the Berlin Regional Court, Google has been ordered to divulge to its users during the registration process which of its myriad services (over 70) process their data. This ruling comes following a complaint by the Federation of German Consumer Organizations (vzbv) that neither the "express personalization" nor the "manual personalization" complied with the legal requirements of the European General Data Protection Regulation (GDPR).
The verdict, issued on March 25, 2025, and published last Friday (Case No. 15 O 472/22), is not yet final, as Google has lodged an appeal against it. The tech giant has expressed dissatisfaction with the decision of the regional court.
What Data Does Google Collect?
Consumer advocates stressed the importance of users knowing the purpose for which their data is processed. They believe users should be able to make informed decisions about their data.
Judges at the Berlin Regional Court concurred with this legal opinion. The ruling states, "The defendant's lack of transparency lies in the fact that it does not inform users about the individual Google services, Google apps, Google websites, or Google partners for which their data will be used." The scope of the consent remains shrouded in mystery for the user.
Google: Old Account Creation Process Already Changed
Google has argued that the ruling pertains to an outdated account creation process that has since been amended. "Our enduring commitment is to let users control how Google functions on their terms, with clear-cut choices based on in-depth research, testing, and guidelines from European data protection authorities," stated the company.
In the proceedings, Google contended that listing all services would result in an expensively lengthy text, potentially impeding transparency. However, this argument was dismissed by the court, which maintained that information about the extent of consent is a mandatory requirement under law.
Consent or Abandon Ship
The regional court also took issue with the fact that users only had the option to either agree to all data usage or abandon the process during "express personalization." A customized rejection was not available. Even during "manual personalization," consumers were unable to opt out of using the location Germany.
- In light of the recent court ruling, the updated community policy of Google might now include a transparent breakdown of the various vocational training programs they offer, as this data processing is a part of their myriad services. This alteration would allow users to make informed decisions regarding their data and vocational training preferences.
- Furthermore, as Google battles the impending appeal and seeks to comply with the ruling, the technology-driven finance sector could potentially take cues from this decision, aiming to improve their own data transparency practices by following the regulation's guidelines on vocational training and consumer consent.
