Dear Mr. Page:
In April 2012, Google announced "Project Gla**" on Google+. The company indicated that it wanted to build a technology that "helps you explore and share your world." The creation of Google Gla** is said to allow you to take pictures, record and share what you see hands free, obtain directions and send messages, and basically ask whatever is on your mind right before your eyes.
Since the announcement of this initiative, there have been a number of articles written discussing not only the vast innovation of this technology, but also the privacy implications. For example, a recent article in the Wall Street Journal states, "It will only be a matter of time until you'll be able to aim the lens of your device at his or her face, and using face recognition technology get the individual's address, work history, marital status, measurements and hobbies. In addition, an article in Forbes indicated that a bar in Seattle has already declared the technology banned in advance from the establishment due to privacy concerns.
As members of the Congressional Bi-Partisan Privacy Caucus, we are curious whether this new technology could infringe on the privacy of the average American. Because Google Gla** has not yet been released and we are uncertain of Google's plans to incorporate privacy protections into the device, there are still a number of unanswered questions that we share. Accordingly, we would appreciate the answers to the questions that follow:
1. In 2010, it was discovered that Google was collecting information across the globe from unencrypted wireless networks. This practice caused multiple investigations into the company along with consumers left perplexed. Google just recently agreed to pay $7 million to settle charges with 38 states for the collection of data from unprotected Wi-Fi networks without permission. Google also admitted that they did not adequately protect the privacy of consumers and "tightened up" their system to address the issue. While we are thankful that Google acknowledged that there was an issue and took responsible measures to address it, we would like to know how Google plans to prevent Google Gla** from unintentionally collecting data about the user/non-user without consent?
2. What proactive steps is Google taking to protect the privacy of non-users when Google Gla** is in use? Are product lifecycle guidelines and frameworks, such as Privacy By Design, being implemented in connection with its product design and commercialization? For example, if a Google Gla** customer/user decides to resell or to dispose of their Google Gla** product, would there be any product capabilities incorporated into the device to ensure that one's personal information remains private and secure?
3. When using Google Gla**, is it true that this product would be able to use Facial Recognition Technology to unveil personal information about whomever and even some inanimate objects that the user is viewing? Would a user be able to request such information? Can a non-user or human subject opt out of this collection of personal data? If so, how? If not, why not?
4. In Google's privacy policy, it states that the company may reject requests that are unreasonably repetitive, require disproportionate technical effort...risk the privacy of others, or would be extremely impractical. Please provide examples of when Google would reject requests on Google Gla** that would risk the privacy of others? Would Google place limits on the technology and what type of information it can reveal about another person? If so, please explain. If not, why not?
5. Given Google Gla**'s sensory and processing capabilities, has Google considered making any additions or refinements to its privacy policy? If so, please explain. If not, why not?
6. In Google's privacy policy, it states that the company "may collect device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information including phone numbers). a. Would this information be collected from users operating Google Gla**? If so, what specific information is Google intending to collect?
b. Would Google Gla** collect any data about the user without the user's knowledge and consent? If so, why? If not, please explain. 7. It was recently revealed that the New York Times was the first to release an app for Google Gla**. To what extent was privacy considered in approving this app? Is Google planning to make privacy a priority for future app developers? If not, why not? If so, please explain.
8. Will Google Gla** have the capacity to store any data on the device itself? If so, will Google Gla** implement some sort of user authentication system to safeguard stored data? If not, why not? If so, please explain.
Sincerely,
[Bi-Partisan Privacy Caucus]