4 ms·

IANAL, but I think they would possibly be in breach of their own privacy policy: > How we use information we collect > We use the information we collect from

IANAL, but I think they would possibly be in breach of their own privacy policy: > How we use information we collect > We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and our users. We also use this information to offer you tailored content – like giving you more relevant search results and ads. [...] > We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Policy. I don't think trading for profit on information a user would reasonably expect to be private (search history, browsing history, email) could reasonably be construed to fall into any of those categories, however the definition of "services" in "develop new [services]" is a bit of a joker. Google Hedge Fund anyone?

linkregister 9y ago
It sounds like the kind of thing that would cause an existential crisis to the G Suite unit ($1B+ annual revenue) when discovered or leaked. This would have follow-on effects to other Google brands. Also massive liability for breach of contract or even perhaps fraud. In the G Suite contract, do customers indemnify Google from damages above a certain amount for privacy breaches? I haven't seen the T&Cs, just the privacy policy.
- mseebach 9y ago
  That's basically my rationale for trusting Google with my data: They have both the means (lots of well paid smart people) and the interest (a substantial leak/misuse of my data could well be a fatal event for Google) to take care of it. > In the G Suite contract, do customers indemnify Google from damages above a certain amount for privacy breaches? I don't see how they wouldn't.
- eitally 9y ago
  There is a standard indemnification clause that is sometimes negotiated slightly one way or another by individual customers.
s73ver 9y ago
Right. But as a nefarious employee, that's Google's problem. By the time it comes to light, I'm already off laying on a beach in a country without an extradition treaty.
- mseebach 9y ago
  I suspect very few individual Google employees have the unsupervised access required to pull off something like this.
  - eitally 9y ago
    And the ones who do still have every action logged.

linkregister 9y ago

It sounds like the kind of thing that would cause an existential crisis to the G Suite unit ($1B+ annual revenue) when discovered or leaked. This would have follow-on effects to other Google brands. Also massive liability for breach of contract or even perhaps fraud. In the G Suite contract, do customers indemnify Google from damages above a certain amount for privacy breaches? I haven't seen the T&Cs, just the privacy policy.

mseebach 9y ago
That's basically my rationale for trusting Google with my data: They have both the means (lots of well paid smart people) and the interest (a substantial leak/misuse of my data could well be a fatal event for Google) to take care of it. > In the G Suite contract, do customers indemnify Google from damages above a certain amount for privacy breaches? I don't see how they wouldn't.
eitally 9y ago
There is a standard indemnification clause that is sometimes negotiated slightly one way or another by individual customers.

s73ver 9y ago

Right. But as a nefarious employee, that's Google's problem. By the time it comes to light, I'm already off laying on a beach in a country without an extradition treaty.

mseebach 9y ago
I suspect very few individual Google employees have the unsupervised access required to pull off something like this.
- eitally 9y ago
  And the ones who do still have every action logged.