Google is neither the party holding the payroll information nor the party that chose to make it available on terms that are insecure against loss of control of

Google is neither the party holding the payroll information nor the party that chose to make it available on terms that are insecure against loss of control of the domain, why would it be rational for them to be liable?