North Carolina Department of Justice
North Carolina Department of Justice
North Carolina Department of Justice
Submit this request

Google Street View to improve privacy protections, AG Cooper says

Release date: 3/12/2013

Google cannot use Street View cars to collect unauthorized data, must destroy data previously collected

Raleigh: Google will not collect unauthorized data from unsecured wireless networks while taking photographs for its Street View Service and will destroy data already collected, among other privacy protections put in place under an agreement with North Carolina and 38 other states, Attorney General Roy Cooper announced Tuesday.
“In an age where more information than ever before is available at our fingertips, companies have got to take protecting personal privacy more seriously,” Cooper said.  “Just because it’s technologically possible to gather certain data doesn’t make it right.”
Google Street View is an online service that provides street-level photos of locations around the world. The images are photographed by cars that travel on public streets.
Between 2008 and March 2010, cars taking photographs for Google Street View were equipped with antennae and software that the company acknowledged collected network identification information for use in future geolocation services.  Google also collected and stored data frames and other “payload data” being transmitted over those unsecured business and personal wireless networks without authorization.
Under terms of the agreement, the unauthorized data collected will be destroyed. Further, Google agreed that the payload data has not been and will not be used in any product or service, or disclosed to a third party.  Google will also pay $7 million to the states, including $151,024.02 to North Carolina.
While Google represented it was unaware the payload data was being collected, the agreement it signed with the states Tuesday acknowledges the information may have included URLS of requested web pages, partial or complete email communications, and any confidential or private information being transmitted to or from the network user while the Street View cars were driving by.
Google has since disabled or removed the equipment and software used to collect the payload data from its Street View vehicles, and agreed not to collect any additional information without notice and consent.
Other key elements of the agreement require Google to run an employee training program about privacy and confidentiality of user data for at least 10 years.  It must also conduct a public service advertising campaign to help educate consumers about steps they can take to better secure their personal information while using wireless networks.

Media contact:  Noelle Talley (919) 716-6413