3 ms·
>The statement even admits to collecting data for other purposes in the negative - otherwise the would simply say they "scan ... collect or use" the data at all
by nemothekid 11y ago
>The statement even admits to collecting data for other purposes in the negative - otherwise the would simply say they "scan ... collect or use" the data at all.
OTOH, this is obvious. If you drop an analytics tag on GAFW or you track data for purpose of bug collection, or you are even keeping server access logs, then you are de facto collecting data.
- blowski 11y agoIn which case they could say "we collect the following data for the following purposes". By leaving a big vague hole into which unspecified data is poured for unspecified purposes, they are bound to arouse suspicion.
- nemothekid 11y agoI don't mean to defend Google, but only to sympathize that it could be very difficult for a well meaning actor to come up with a tightly worded TOS the way you are describing. For example, consider "we collect the following data" - because everything is hosted in GAFE, isn't Google technically collecting your email data? And your calendar data? And your students research papers? The list of "following purposes" could be very long to just even describe the list of features the client is expecting - and may even have to be updated every time a new feature is deployed - imagine you had to go through legal every time you wanted to push a change prod.
- blowski 11y agoTo paraphrase 'extraordinary data collection requires an extraordinary privacy policy'. I would absolutely want every change by Google to jump through lots of hoops. Facebook-style "Move fast and break things" and "Ask for forgiveness instead of permission" is fine when you're allowing people to share photos of their cats, but not when you're managing the education data of nearly every child in the country.