6 ms·

What happens when ICE asks Google for your user information

cies 6y ago
> In Google’s case, the company typically lets users know which agency is seeking their information. So, they dont have to let you know. :) > Because of this, it’s important for providers such as Google to act as a check on law enforcement, Crocker said. I feel safe now /s
deleted 6y ago
[deleted]
londons_explore 6y ago
I would like to see all gag orders be time-limited. And I'd like to see the vast majority of them not being for more than a year - very few investigations take over a year, so why should the gag order be longer?
londons_explore 6y ago
There should be a wider list of who to notify. For example, if the court request is "Hand over names of all users in this geographic region at this time", then every Google user should be notified. Many of the notifications will say "A court ordered us to check your location history. You were not in the relevant area at the relevant time, so we handed no further of your data to the court". Such notifications would inform regular Joe how often and why the government is looking at his data.
- selfhoster11 6y ago
  What's the point of notifying about government looking at data, if nothing will realistically change? By analogy, the sales tax is printed on every single receipt for a product, yet nobody clamours to reduce the sales tax. It's "just the way it is" because people have gotten used to it.
  - guerrilla 6y ago
    Presumably they are mostly okay with the sales tax and may not be okay being spied on.
  - carlhjerpe 6y ago
    People understand that the government needs money to operate and have come to terms with that, people might not have come to terms with the government looking through their private lives on the Internet.
    - vonwoodson 6y ago
      Yet, people have come to terms with [big company] collecting their data and [selling] that data to [literally anyone with money].
      - ClumsyPilot 6y ago
        That demonstrably false - ask a random joe how much tax he just paid, and he will know. Ask him how many companies bought his data, and he wont have a clue. He doesnt even know who has it, who sold it, or anything for that matter. If, every time his data was sold, he got a notification, then maybe we would see a change.
        mc32 6y ago
        Ask Joe where the government spends his taxes, he’ll equally be unable to tell you where it goes.
        carlhjerpe 6y ago
        Roads, healthcare, education, infrastructure, military are things most people would probably be able to respond. Also the money they're giving to the government isn't tied to their identity in any way other than how well they're doing financially.
        ClumsyPilot 6y ago
deadbytes 6y ago
>Google hands over data of criminals to law enforcement What is the story here?
- Threeve303 6y ago
  Technically if you’re being investigated and the companies hand over your info, you may not be a criminal at that point. You remember the concept we had for hundreds of years that people are presumed innocent until found guilty by a jury of their peers. Also, for hundreds of years, police could not just nicely ask a third party to turn over all of your data, at least at the scale of something like the data google keeps on everyone. I’m amazed by the number of people apparently just fine with this being the norm.
  - DocTomoe 6y ago
    People are fine with police overstepping as long as they aren't in the crosshairs. Usually, even non paranoid people become staunch privacy advocates once they had to fight the system after their data was abused.
  - deadbytes 6y ago
    I am greatly opposed to mass surveillance, especially when justified by some immaterial bogeyman such as "stopping terrorism". However in this case, illegal immigration is a legitimate problem in the US with actual statistics to prove so, and it seems that they are only targetting individuals that they actually suspect of being criminals. If law enforcement has genuine belief that I am a criminal then why would I be opposed to giving them data to absolve myself? And yes of course this has the potential to be abused, but is there any proof of this in the article? It seems like one specific individual was targetted, and they had the courtesy to notify them that this was happening.
  - PeterisP 6y ago
    For hundreds of years police could just nicely ask a third party to turn over all your data - by simply going in and asking what they wanted to know - and proprietors often just did tell all they knew or had recorded. If the third party would refuse and police would demand that they comply, then they'd need a warrant, but nicely asking has always been an option during an investigation.
kajecounterhack 6y ago
Short article. They have a soft paywall. Article text: You’re scrolling through your Gmail inbox and see an email with a strange subject line: A string of numbers followed by “Notification from Google.” It may seem like a phishing scam or an update to Gmail’s terms of service. But it could be the only chance you’ll have to stop Google from sharing your personal information with authorities. Tech companies, which have treasure troves of personal information, have become natural targets for law enforcement and government requests. The industry’s biggest names, such as Google, Facebook, Twitter and LinkedIn, receive data requests — from subpoenas to National Security Letters — to assist in, among other efforts, criminal and non-criminal investigations as well as lawsuits. An email like this one is a rare chance for users to discover when government agencies are seeking their data. In Google’s case, the company typically lets users know which agency is seeking their information. In one email The Times reviewed, Google notified the recipient that the company received a request from the Department of Homeland Security to turn over information related to their Google account. (The recipient shared the email on the condition of anonymity due to concern about immigration enforcement). That account may be attached to Gmail, YouTube, Google Photos, Google Pay, Google Calendar and other services and apps. The email, sent from Google’s Legal Investigations Support team, notified the recipient that Google may hand over personal information to DHS unless it receives within seven days a copy of a court-stamped motion to quash the request. That’s a high bar to clear in a short amount of time, said Paromita Shah, co-founder and executive director of immigration rights law firm Just Futures. “What Google expects you to do is to quash the subpoena and that would require you to go to federal court,” Shah said. “I’d like to know how many people are gonna have the resources and the understanding that they have only seven days to hire an attorney to quash an ICE subpoena in federal court.”
williesleg 6y ago
So tired of illegals. Go home assholes.
ephaeton 6y ago
We have a well-established process for managing requests from law enforcement for data about our users: when we receive a request, we notify users that their information has been requested, push back on overly broad requests to protect users’ privacy, and provide transparency around such requests in our transparency report As a non-native speaker of l'inglese, there's two ways my brain parses this - simultaneously: (A) when we receive a request, we notify users (... well knowing they can't do anything ...), push back on overly broad requests to protect users' privacy (i.e., we do push back on requests that request we respect users' privacy, who do you think we are?!) and provide transparency ... ("only") in our "transparency" report I.e., we very well sell the hide of anybody and everybody as quickly as possible, not only abiding by requests but filling in the blanks as well. Then we increment a counter "requests_served++" and include that in our transparancy "report" lol (B) when we receive a request, we notify users (..to warn and enable them..), push back on overly broad requests IN ORDER TO protect users' privacy and provide transparency (as best as possible) I.e., we are the good guys and actually try to serve our users as best as possible. The sentence "we push back on overly broad requests to protect users' privacy" is at the center of this dichotomy for me. To clarify: we push back on (overly broad requests to protect users' privacy) vs. we push back on (overly broad requests) [in order] to protect users' privacy. To you native speakers: is there doubt which of the two are meant for you?
- CGamesPlay 6y ago
  It's obvious that they intend "IN ORDER TO", because it's obvious that they aren't getting requests from law enforcement to protect users' privacy. But I do think the correct interpretation is somewhere in the middle, since they notify users while knowing that they can't do anything.
  - ephaeton 6y ago
    Yeah, Law Enforcement won't request to protect users' privacy, but users may very well reply to the heads-up requesting a "broad" protection of their own privacy...
  - ClumsyPilot 6y ago
robertlagrant 6y ago
What happens in my case is GDPR says no.
- koheripbal 6y ago
  How does Google know who is a GDPR-bound user? Geo-location of initial signup IP address?
- Nextgrid 6y ago
  And Google already breaches the GDPR with their non-compliant consent prompt. But regarding law enforcement requests, GDPR explicitly allows any data sharing that's required to comply with the law.
throwaway-a-way 6y ago
So I actually received one of these notices from Google. A few years ago detective in Massachusetts had subpoenaed all information having to do with my GMail address. Not having done anything wrong it was very stressful time for me trying to figure out what the police were after. Turns out some scammer had put down my email address (a common first name/ last name combo) on a form at a UPS store. UPS being the terrible company it is didn't bother to verify said address. (And BTW refused to remove my address even after I repeatedly called their help line). In the end I had to hire a lawyer a thousand miles away in order to contact the detective to try and clear up the situation. Five things stick out in my memories of this incident: 1. If I was so inclined it would have been really easy to destroy all of my computers given the advance warning. 2. They attack surface was bigger than I could imagine. Given that I payed for Google Drive and used Google DNS Google knows everything about my online life including all the illegal things (copyright related) that the fuzz might find despite looking for something completely unrelated. 3. It is super easy to find oneself in a kafkaesque type situation where one if forced to try and prove a negative. "Yes that is my email address but I swear I never scammed someone out of their iPhone. Yes I know that's what actual scammers would say." 4. It would have been super easy to dismiss the warning email as spam. 5. They don't tell you why you where subpoenaed. I get Google doesn't know but it does leave (innocent) people to spin out into a paranoid frenzy.
- LorenPechtel 6y ago
  Yup. I know a guy who got all scared because he got a letter from the government indicating call(s) of his had been recorded in a wiretap. Fortunately for his peace of mind I immediately suspected what was going on--he had called a business that had been wiretapped. (I didn't know about the wiretap, I knew about the investigation from the newspaper.) A complete nothing, but it scared an educated guy.
StanislavPetrov 6y ago
They'd probably hand over the account information of some poor sap who shares my very common name since I don't have a Google account.

cies 6y ago

> In Google’s case, the company typically lets users know which agency is seeking their information. So, they dont have to let you know. :) > Because of this, it’s important for providers such as Google to act as a check on law enforcement, Crocker said. I feel safe now /s

deleted 6y ago

[deleted]

londons_explore 6y ago

I would like to see all gag orders be time-limited. And I'd like to see the vast majority of them not being for more than a year - very few investigations take over a year, so why should the gag order be longer?

londons_explore 6y ago

There should be a wider list of who to notify. For example, if the court request is "Hand over names of all users in this geographic region at this time", then every Google user should be notified. Many of the notifications will say "A court ordered us to check your location history. You were not in the relevant area at the relevant time, so we handed no further of your data to the court". Such notifications would inform regular Joe how often and why the government is looking at his data.

selfhoster11 6y ago
What's the point of notifying about government looking at data, if nothing will realistically change? By analogy, the sales tax is printed on every single receipt for a product, yet nobody clamours to reduce the sales tax. It's "just the way it is" because people have gotten used to it.
- guerrilla 6y ago
  Presumably they are mostly okay with the sales tax and may not be okay being spied on.
- carlhjerpe 6y ago
  People understand that the government needs money to operate and have come to terms with that, people might not have come to terms with the government looking through their private lives on the Internet.
  - vonwoodson 6y ago
    Yet, people have come to terms with [big company] collecting their data and [selling] that data to [literally anyone with money].
    - ClumsyPilot 6y ago
      That demonstrably false - ask a random joe how much tax he just paid, and he will know. Ask him how many companies bought his data, and he wont have a clue. He doesnt even know who has it, who sold it, or anything for that matter. If, every time his data was sold, he got a notification, then maybe we would see a change.
      - mc32 6y ago
        Ask Joe where the government spends his taxes, he’ll equally be unable to tell you where it goes.
        carlhjerpe 6y ago
        Roads, healthcare, education, infrastructure, military are things most people would probably be able to respond. Also the money they're giving to the government isn't tied to their identity in any way other than how well they're doing financially.
        ClumsyPilot 6y ago

deadbytes 6y ago

>Google hands over data of criminals to law enforcement What is the story here?

Threeve303 6y ago
Technically if you’re being investigated and the companies hand over your info, you may not be a criminal at that point. You remember the concept we had for hundreds of years that people are presumed innocent until found guilty by a jury of their peers. Also, for hundreds of years, police could not just nicely ask a third party to turn over all of your data, at least at the scale of something like the data google keeps on everyone. I’m amazed by the number of people apparently just fine with this being the norm.
- DocTomoe 6y ago
  People are fine with police overstepping as long as they aren't in the crosshairs. Usually, even non paranoid people become staunch privacy advocates once they had to fight the system after their data was abused.
- deadbytes 6y ago
  I am greatly opposed to mass surveillance, especially when justified by some immaterial bogeyman such as "stopping terrorism". However in this case, illegal immigration is a legitimate problem in the US with actual statistics to prove so, and it seems that they are only targetting individuals that they actually suspect of being criminals. If law enforcement has genuine belief that I am a criminal then why would I be opposed to giving them data to absolve myself? And yes of course this has the potential to be abused, but is there any proof of this in the article? It seems like one specific individual was targetted, and they had the courtesy to notify them that this was happening.
- PeterisP 6y ago
  For hundreds of years police could just nicely ask a third party to turn over all your data - by simply going in and asking what they wanted to know - and proprietors often just did tell all they knew or had recorded. If the third party would refuse and police would demand that they comply, then they'd need a warrant, but nicely asking has always been an option during an investigation.

kajecounterhack 6y ago

Short article. They have a soft paywall. Article text: You’re scrolling through your Gmail inbox and see an email with a strange subject line: A string of numbers followed by “Notification from Google.” It may seem like a phishing scam or an update to Gmail’s terms of service. But it could be the only chance you’ll have to stop Google from sharing your personal information with authorities. Tech companies, which have treasure troves of personal information, have become natural targets for law enforcement and government requests. The industry’s biggest names, such as Google, Facebook, Twitter and LinkedIn, receive data requests — from subpoenas to National Security Letters — to assist in, among other efforts, criminal and non-criminal investigations as well as lawsuits. An email like this one is a rare chance for users to discover when government agencies are seeking their data. In Google’s case, the company typically lets users know which agency is seeking their information. In one email The Times reviewed, Google notified the recipient that the company received a request from the Department of Homeland Security to turn over information related to their Google account. (The recipient shared the email on the condition of anonymity due to concern about immigration enforcement). That account may be attached to Gmail, YouTube, Google Photos, Google Pay, Google Calendar and other services and apps. The email, sent from Google’s Legal Investigations Support team, notified the recipient that Google may hand over personal information to DHS unless it receives within seven days a copy of a court-stamped motion to quash the request. That’s a high bar to clear in a short amount of time, said Paromita Shah, co-founder and executive director of immigration rights law firm Just Futures. “What Google expects you to do is to quash the subpoena and that would require you to go to federal court,” Shah said. “I’d like to know how many people are gonna have the resources and the understanding that they have only seven days to hire an attorney to quash an ICE subpoena in federal court.”

williesleg 6y ago

So tired of illegals. Go home assholes.

ephaeton 6y ago

We have a well-established process for managing requests from law enforcement for data about our users: when we receive a request, we notify users that their information has been requested, push back on overly broad requests to protect users’ privacy, and provide transparency around such requests in our transparency report As a non-native speaker of l'inglese, there's two ways my brain parses this - simultaneously: (A) when we receive a request, we notify users (... well knowing they can't do anything ...), push back on overly broad requests to protect users' privacy (i.e., we do push back on requests that request we respect users' privacy, who do you think we are?!) and provide transparency ... ("only") in our "transparency" report I.e., we very well sell the hide of anybody and everybody as quickly as possible, not only abiding by requests but filling in the blanks as well. Then we increment a counter "requests_served++" and include that in our transparancy "report" lol (B) when we receive a request, we notify users (..to warn and enable them..), push back on overly broad requests IN ORDER TO protect users' privacy and provide transparency (as best as possible) I.e., we are the good guys and actually try to serve our users as best as possible. The sentence "we push back on overly broad requests to protect users' privacy" is at the center of this dichotomy for me. To clarify: we push back on (overly broad requests to protect users' privacy) vs. we push back on (overly broad requests) [in order] to protect users' privacy. To you native speakers: is there doubt which of the two are meant for you?

CGamesPlay 6y ago
It's obvious that they intend "IN ORDER TO", because it's obvious that they aren't getting requests from law enforcement to protect users' privacy. But I do think the correct interpretation is somewhere in the middle, since they notify users while knowing that they can't do anything.
- ephaeton 6y ago
  Yeah, Law Enforcement won't request to protect users' privacy, but users may very well reply to the heads-up requesting a "broad" protection of their own privacy...
- ClumsyPilot 6y ago

robertlagrant 6y ago

What happens in my case is GDPR says no.

koheripbal 6y ago
How does Google know who is a GDPR-bound user? Geo-location of initial signup IP address?
Nextgrid 6y ago
And Google already breaches the GDPR with their non-compliant consent prompt. But regarding law enforcement requests, GDPR explicitly allows any data sharing that's required to comply with the law.

throwaway-a-way 6y ago

So I actually received one of these notices from Google. A few years ago detective in Massachusetts had subpoenaed all information having to do with my GMail address. Not having done anything wrong it was very stressful time for me trying to figure out what the police were after. Turns out some scammer had put down my email address (a common first name/ last name combo) on a form at a UPS store. UPS being the terrible company it is didn't bother to verify said address. (And BTW refused to remove my address even after I repeatedly called their help line). In the end I had to hire a lawyer a thousand miles away in order to contact the detective to try and clear up the situation. Five things stick out in my memories of this incident: 1. If I was so inclined it would have been really easy to destroy all of my computers given the advance warning. 2. They attack surface was bigger than I could imagine. Given that I payed for Google Drive and used Google DNS Google knows everything about my online life including all the illegal things (copyright related) that the fuzz might find despite looking for something completely unrelated. 3. It is super easy to find oneself in a kafkaesque type situation where one if forced to try and prove a negative. "Yes that is my email address but I swear I never scammed someone out of their iPhone. Yes I know that's what actual scammers would say." 4. It would have been super easy to dismiss the warning email as spam. 5. They don't tell you why you where subpoenaed. I get Google doesn't know but it does leave (innocent) people to spin out into a paranoid frenzy.

LorenPechtel 6y ago
Yup. I know a guy who got all scared because he got a letter from the government indicating call(s) of his had been recorded in a wiretap. Fortunately for his peace of mind I immediately suspected what was going on--he had called a business that had been wiretapped. (I didn't know about the wiretap, I knew about the investigation from the newspaper.) A complete nothing, but it scared an educated guy.

StanislavPetrov 6y ago

They'd probably hand over the account information of some poor sap who shares my very common name since I don't have a Google account.