:
Thank you very much, Mr. Chair, members of the committee.
Thank you very much for this opportunity to meet with you to discuss Street View and Google's mistaken collection of Wi-Fi payload data, and to answer your questions.
My name is Jacob Glick. I'm Google's Canada policy counsel. In this role, I work with regulators, policy makers, academics, civil society, and industry on public policy issues affecting Google and the open Internet. In Canada, Google has offices in Waterloo, Toronto, Montreal, and Ottawa. Google is consistently named one of the best places to work in Canada. Our Waterloo and Montreal engineering offices are developing products that are used by hundreds of millions of people globally, and these offices are expanding significantly.
To begin, I would like to update you on Google's Street View products, since Mr. Lister appeared before this committee in June 2009. We have had a very successful rollout of Google Street View in a way that showcases how privacy and innovation can be combined to produce successful leading-edge services for consumers.
Prior to launching Street View in Canada, we addressed all of the concerns identified by this committee and by the Privacy Commissioner. We've implemented the most sophisticated blurring technology to blur faces and licence plates in all of our images. We've implemented a quick and easy takedown procedure. Anybody can request that Google remove pictures of themselves, their house, their kids, or their car, from Google Street View. Finally, we are permanently baking in this blurring after one year.
Canadians are avid users of Street View. In fact, in absolute numbers, Canadians are the third most active users of Street View in the world, behind only the U.S. and the U.K. Since its launch, Canadians from coast to coast to coast have used this next-generation cartography to map their way to the store, promote their local business, sell their house, and explore our country online.
In addition to updating this committee on the successful rollout of Street View, we want to talk to you in particular about the Wi-Fi matter, which is not, strictly speaking, part of Street View, but which used Street View vehicles as a platform.
Let me start by saying we are very sorry this happened. What happened is not consistent with our commitment to serving Internet users, and frankly, we are embarrassed about this.
I want to give you an overview of what happened, how we found out, what we did immediately, and what we are doing to prevent it from happening. After that I'll be happy to answer your questions.
To begin, I want to underscore some important facts for this committee. No payload data transferred over encrypted networks were collected by Google. Google had no desire to use payload data in any way. No payload data have been used in any Google product or service, and none of the Canadian payload data have been given or disclosed to third parties; it has been segregated and secured.
So what did happen? As you know, in 2007 Google was preparing to launch Street View and was deploying a fleet of vehicles around the world to collect street-level imaging. At the same time, an engineer with our location-based services group had the idea of using Street View vehicles as a platform to do what many other companies have done, which is detect Wi-Fi hot spots to support location-based services.
Using publicly broadcast Wi-Fi hot spots as landmarks to help users identify where they are is common industry practice. The engineer designed software code to collect Wi-Fi network data, and unfortunately, also Wi-Fi payload data. Payload data refers to the contents of transmissions.
Google did not want this payload data and does not believe that collecting such payload data is useful or appropriate.
The engineer should have flagged, for Google's in-house lawyers, the plan to collect Wi-Fi payload data. He did not do so. If he had, this would have been an opportunity at the outset of the program for Google to identify the problem and stop it. As a result, the code was deployed on Street View vehicles. The software worked as it was programmed to do, collecting Wi-Fi network data and Wi-Fi payload data sent over unencrypted networks.
In April of this year Google was asked by the Hamburg Data Protection Authority to audit the Wi-Fi data collected via Street View vehicles. We carried out that audit and discovered that Wi-Fi payload data were being collected in addition to the network data. Before announcing publicly what we discovered, I personally called Commissioner Stoddart and advised her of this issue.
After that, Google made a public announcement and apologized for what had happened. To be clear, Google did not want this payload data. Its collection was a mistake. Shortly after I advised Commissioner Stoddart that payload data had been collected in Canada, she began an investigation into this matter. We cooperated with her and provided her investigators with access to the Canadian payload data at our corporate headquarters.
To provide some context into the comprehensiveness of this investigation, the Privacy Commissioner's investigators were the only data protection authorities globally to conduct their review into this matter at Google's headquarters in California. The commissioner has issued a preliminary letter of findings; we accept her findings. We are committed to resolving this matter.
We have been asked, how could this data be collected without Google knowing about it? First, to provide some context, the Wi-Fi payload data represents a small amount of data, relatively. All the payload data collected in Canada could fit on a standard-sized USB thumb drive that you could buy at Best Buy or Costco. Also, the data was written onto the hard drives in the cars in a raw form, meaning it cannot be understood or recognized unless processed to be human-readable. Other than the engineer who wrote the code, no one at Google had any plans to use this data, so there was no trigger for anyone to look at it.
It's important to note that Google had no desire to collect the payload data or to use the payload data in any way. To be clear, Google has not used this data in any product or service. Regardless, there is no excuse for Google having collected this data. As soon as Google discovered that they had been mistakenly collecting Wi-Fi payload data from unencrypted Wi-Fi networks, all of the Street View vehicles around the world were grounded. All of the Wi-Fi payload data was immediately segregated and secured. Note: nobody has reviewed the Canadian payload data, other than the Privacy Commissioner's investigators and those who facilitated their investigation. It has not been disclosed to any third parties.
It's fair to ask, what measures is Google putting in place to ensure this never happens again? First, Google began a comprehensive investigation to determine how this happened and what steps need to be implemented to make sure this never happens again. Google commissioned an independent third party to review the code. That independent report has been made public on our blog, and it was provided to the Privacy Commissioner during her investigation.
Further, I can report that on October 22 Google announced a number of significant changes to its privacy practices and controls. Prior to announcing these publicly, I personally spoke to Commissioner Stoddart to advise her of these changes. She also discussed them in more depth with my colleagues last week. Specifically, these announced changes were as follows. First, Google appointed Dr. Alma Whitten as our director of privacy to ensure that we build effective privacy controls into our products and internal practices. Dr. Whitten is an internationally recognized expert in the computer science fields of privacy and security. Second, we are enhancing our core privacy training with a particular focus on the responsible collection, handling, and use of data. Finally, Google is adding new safeguards to our existing privacy compliance system to include independent internal audits to ensure that user privacy is protected.
We are of the view that these changes will significantly improve our processes and controls to prevent something like this from happening again. That is where we are now. We're sorry this happened. We've learned from it, and we are improving our processes as a result.
I would be pleased to answer your questions.
Thank you, Mr. Chair.
:
We worked with the Privacy Commissioner to develop something that made sense under Canadian law and that she was comfortable with, and that we thought this committee and Canadians would be comfortable with, for notifying Canadians prior to collecting the data. As you rightly pointed out, all of our cars are clearly marked—and this is on a global basis—and they are visibly Google cars, and we have a website that we constantly update with information about where we're going to be collecting information.
In terms of the precise day and time and the precise neighbourhood, there is a level of complexity here that we have to acknowledge. These are moving vehicles that depend on certain weather conditions and certain other externalities, and it's hard to predict with precision where and when they will be. But, in general, we provide what we think is full and appropriate notice, both here in Canada and around the world, albeit the precise content of that notice may vary slightly.
But there's another important point I would like to emphasize on this issue in particular. Google is not the only company that is collecting street-level imaging in Canada. In order to create the GPS maps that are used in most of your cars and on websites where you access digital maps, the companies that create those maps, the companies that collect the digital information, follow a very similar process and take photographs of every street and every house. And they don't provide any notification, that I'm aware of, to anybody. They haven't received any scrutiny from a regulatory perspective on this, that I'm aware of, and they're not under the same obligations we are in terms of any kind of retention of that data.
So when comparing what our competitors are doing with what we're doing, it's important to put that into a broader perspective, that every digital map you use is created using a process of street-level photography. That's how maps are created today.
Thank you, Mr. Glick, for being here today.
I really want to applaud you for your forthright testimony today. I think your admissions have been refreshing, understanding the fact it was an inadvertent error and that you're taking all necessary steps to correct the matter, from what I can tell.
I was surprised to hear about the number of Canadians who are using Street View. I think that indicates the value of Street View. You indicated that possibly it's especially valuable for those who can't read maps. I would suggest it's also valuable for anybody from Kitchener, because Kitchener has a series of streets that run in many different directions, as you would know, coming from that area. King Street runs east, west, north, and south, so it's difficult to give someone directions. So I appreciate your efforts there.
I'm disappointed that you don't have many of the rural areas mapped on Street View. I also represent three townships: Wellesley, Wilmot, and Woolwich. It's disappointing that I can't take a Sunday afternoon drive on Google and see the beautiful landscape in my riding. That's just a little bit of encouragement for you to get the rural areas up as well. Maybe there are initiatives to do the rural areas. My use of Street View has been very limited, so I'm not sure if many of the rural areas are covered. Are they?
:
Thanks very much for the questions. I'll answer them in reverse order, if you don't mind, just for the committee's benefit.
We are looking for, literally, the top engineering minds in Canada, and we're attracting them because of what a quality place it is to work. Frankly, it is really hard for Google in general to find people, but as the Waterloo office goes on a global basis for Google, they've had particular success because of the top-quality education system we have and the top-quality engineering minds we have.
On the other question you've asked, about what the commissioner referred to as privacy by design--and this is a term coined by Ontario privacy commissioner Ann Cavoukian--we are very supportive of the principles that Commissioner Cavoukian has been evangelizing, which is to really bring the values of privacy deeply into an organization, from the start of the product design process.
If you think about it, we were talking a little bit before about how encryption is built into Gmail: that's privacy by design. Commissioner Cavoukian has said that previously. That's privacy by design because built right into the product is a key privacy protection that makes sure you and Google have a private communication, that no one else is getting in there.
So we want to continue to be able to do things like that. The education we're providing is I hope going to deepen those kinds of efforts within the company.