Trying to pin down Google privacy policies is like discussing the weather: whatever you say about it today will probably be obsolete by next week.
Just a couple weeks ago, on April 15, we discussed how Google, in response to an attempted class-action suit alleging privacy violations in California, changed its Terms of Service for Gmail users to say outright that Google will scan the contents of your emails.
As of May 1, Google's online terms of service page is still dated April 14 and still says, in part, that:
Our automated systems analyze your content (including emails) to provide you personally relevant product features, such as customized search results, tailored advertising, and spam and malware detection. This analysis occurs as the content is sent, received, and when it is stored.
However, despite these terms, Google has announced intentions to stop scanning the contents of certain emails—specifically, those attached to students' Apps for Education accounts (which have been made available to schools for seven years), and also, those attached to various government or business accounts.
Privacy implications
For all the privacy implications involved in Google's scanning the contents of everyday Gmail accounts (which, according to its terms of service, it still does), the privacy violations inherent in scanning student or workplace accounts are arguably worse. Consider the opening paragraph of Google's April 30 announcement on the official Google Enterprise blog: “Protecting students with Google Apps for Education”:
Today more than 30 million students, teachers and administrators globally rely on Google Apps for Education. Earning and keeping their trust drives our business forward. We know that trust is earned through protecting their privacy and providing the best security measures.
Nitpick: actually, driving that particular business forward requires only the trust (or at least cooperation) of school administrators, and possibly the teachers. Students, by contrast, can be required to use Google at school whether they trust Google or not, which is one of the reasons why scanning their Gmail activities is more fraught with privacy violations than usual.
A similar problem involves workplace accounts, whether government agencies or the private sector: while no adult is legally mandated to hold down a particular job (in the same sense that minors are legally mandated to attend school or otherwise acquire an education), it's still disquieting to think that, for example, letting Google analyze your workplace communications should be a prerequisite for government employees. However, Google has said it will stop scanning their emails, too.
InBloom withers
Google is not the only company to recently step back from data-mining captive-audience public school students. Last week, data-harvesting company inBloom announced its intention to close up shop altogether, after its CEO Iwan Streichenberger posted a head-smackingly self-serving letter blaming his business failure on overprotective parents who don't want third-party data harvesters vacuuming up all available data about their children and themselves:
Over the last year, the incredibly talented team at inBloom has developed and launched a technical solution that addresses the complex challenges that teachers, educators and parents face when trying to best utilize the student data available to them. That solution can provide a high impact and cost-effective service to every school district across the country, enabling teachers to more easily tailor education to students' individual learning needs. It is a shame that the progress of this important innovation has been stalled because of generalized public concerns about data misuse, even though inBloom has world-class security and privacy protections that have raised the bar for school districts and the industry as a whole.
What were these world-class high-impact utilize-the-data corporate buzzspeak services inBloom offered?
Sopho's Naked Security blog, writing about inBloom's shutdown on April 24, noted:
Since inBloom's rollout in 2013, privacy and security experts and parents have been aghast at schools sucking up everything from students' tax ID numbers to intimate family details (including options to identify family members as "foster parent" or "father’s significant other") with inBloom.
So, between Google's recently announced intention to stop data-mining Apps for Education accounts, and inBloom's intended closing, American students this week theoretically enjoy more privacy protections at school than a month or so before. (Even so: you should probably tape over the webcam on any school-issued laptops your kids have, so school administrators can't spy on them at home.)