Feeds

Google pays just $22.5m to FTC over Safari tracking blunder

More of a tickle than a drop and cough test

Reducing the cost and complexity of web vulnerability management

As expected, Google has agreed to pay the US Federal Trade Commission a paltry penalty of $22.5m for its sneaky bypassing of the default privacy settings of Apple's Safari browser.

The consumer watchdog confirmed in a statement today that Google had settled on charges that it "misrepresented privacy assurances to users" and described the fine as the biggest one ever meted out over the violation of a Commission order.

Nonetheless, the payout is ridiculously small change to Google - which racks up sales of over $20m roughly every five hours. Indeed, the US regulator acknowledged the fact that the company generates billions of dollars of revenue annually.

The penalty was gently flung at the search and ad giant, after the FTC confirmed that it had violated an earlier privacy agreement with the commission.

There was another minor slap applied to the rosy cheek of CEO Larry Page, with the FTC stating that, in addition to the civil penalty, the order also demands Google to disable all the tracking cookies it had said it would place on consumers' computers.

The commission's chairman Jon Leibowitz said:

The record setting penalty in this matter sends a clear message to all companies under an FTC privacy order.

No matter how big or small, all companies must abide by FTC orders against them and keep their privacy promises to consumers, or they will end up paying many times what it would have cost to comply in the first place.

The FTC referred the case to the US Department of Justice, which on Wednesday agreed that Google's privacy blunder was in the public interest and proposed a consent decree that is subject to court approval.

Google, as part of its original agreement in October 2011, avoided being fined and did not have to admit that its biz practices had been unlawful. However, it was always clear that a penalty would be issued to Google if it was found to have violated that deal.

A consent decree makes it clear that the defendant in question - in this case Google - had not operated outside of the law by breaking the initial settlement deal with the FTC.

So slapped hands all round, but the headmaster's cane remains fixed to the wall.

Click here for the FTC's full statement, and this way for a handy technical guide to Google's crafty screw-up. ®

Security and trust: The backbone of doing business over the internet

More from The Register

next story
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
JINGS! Microsoft Bing called Scots indyref RIGHT!
Redmond sporran metrics get one in the ten ring
Driving with an Apple Watch could land you with a £100 FINE
Bad news for tech-addicted fanbois behind the wheel
Murdoch to Europe: Inflict MORE PAIN on Google, please
'Platform for piracy' must be punished, or it'll kill us in FIVE YEARS
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Found inside ISIS terror chap's laptop: CELINE DION tunes
REPORT: Stash of terrorist material found in Syria Dell box
Sony says year's losses will be FOUR TIMES DEEPER than thought
Losses of more than $2 BILLION loom over troubled Japanese corp
Show us your Five-Eyes SECRETS says Privacy International
Refusal to disclose GCHQ canteen menus and prices triggers Euro Human Rights Court action
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.