Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« New Website Seal For Companies Participating In The EU Safe Harbor Program | Main | Whose PII Is Covered Under the EU Data Protection Directive? »

Privacy Concerns Of Google Walking Directions

Last Friday afternoon I got a message from a Popular Science reporter, John Brandon, asking me if I thought that the Google walking directions feature created any privacy concerns. I was finishing a client deliverable at the time, but indicated I would answer him later in the day...which I did take the time to do late in the evening instead of doing other, more recreational, things. I heard no ackowledgment or response with him about the information I provided, but he did write an article about Google walking directions that was published today, "Google Walking Directions: a Privacy Concern?"

John did just confirm to me that he had received my message but too late to include in the article.

Here is the information I provided...

In the interest of time, here are just a few quick thoughts off the top of my head... Yes, as with any type of surveillance-based service such as this, there will always be privacy concerns. Here are just three of them.



  1. Individuals did not provide consent to have their private homes photographed/filmed and published. Many of the images include information that clearly identifies the individuals who live in the homes. Obtaining consent to use personally identifying information (PII), such as is represented in many of these images, is a basic privacy concept in most data protection (privacy) laws throughout the world.

  2. Many of the images are clearly not up-to-date. For my own residence, the image provided is around 5 years old and looks very different today. That's fine by me, but if entities start using such images to make business decisions, investigation plans, law enforcement actions and so on, then they could be making some very poor judgments, and the people who live in the corresponding homes could suffer an injustice or unfair decision as a result.

  3. Many of the images provide information about the home, vehicles, and other property, that could be used for malicious purposes, such as committing burglaries, hate crimes and so on. The images within cities are likely, and look, to be current as opposed to the images of small towns and in rural areas. Some of the images I saw included open garage doors with clear views of the contents, open windows, and even broken doors. True, these things could also be viewed by someone driving by, but by putting all these images in one place on a website, it creates the opportunity for someone to case a neighborhood much more quickly and identify vulnerabilities in homes from the comfort of their own computer desk. The ease of planning crime based upon a person's residence, perhaps even behind privacy fences, has now been made much easier by putting onto the Internet images that could not be seen by just driving or walking by the properties.

That said, the walking directions, in written narrative form, are quite helpful. If I wanted to determine the shortest running path from one point to another, seeing the map and written directions would be quite handy.

The privacy concerns come into play when the clear and close up images of homes, and all their vulnerabilities and even contents in some instances, are provided. Some of the terrain views provide as much detail about a person's home and yard as if the owners had mounted their own CCTV on their light pole!

Clearly my views are quite different than the legal-centric opinion of the Ponemon Institute representative who was quoted in the article.

There can be privacy concerns in situations where no laws are explicitly being violated, and often there are; such has been the case for as long as privacy has been a concern.

Organizations need to go beyond just the consideration of whether or not what they are doing, with images that involve individuals and their homes, is breaking a law. If lawfully publishing a person's home, or place of work, can lead to bad decisions and possible crime, that should also be a consideration.

While visiting U.C. Berkeley early this year I saw some great technologies that they were researching and developing that addressed these types of issues and could be used to blur the portions of the images that would be invading on the privacy of individuals. It would be good for Google to use these types of available privacy-preserving technologies with their Google Walking Directions tool.

What are your thoughts? What would the Google street level shots capture in your neighborhood? At your workplace? Is your organization using the Google satellite views, or street level views, to make business decisions? Perhaps for mortgage or other types of loans applicants?

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/778

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.