Google lawsuit stirs debate over email privacy rights

A U.S. consumer advocacy group has reignited the debate over online privacy after it unearthed a court document in which Google argues that anyone sending messages to Gmails 425 million users should not expect privacy.

The court document isfrom a U.S. class-action lawsuitin which a group of non-Gmail users accuse Google of breaking laws on wiretaps by scanning emails so that the company can target ads to users a key component ofthe company'sbusiness model.

"Just as a sender of a letter to a business colleague cannot be surprised that the recipients assistant opens the letter, people who use web-based email today cannot be surprised if their communications are processed by the recipients ECS [electronic communication service] provider in the course of delivery," the court papers say.

In its filing, Google also cited a 1979 court decision on tracking phone numbers, which stated that "a person has no legitimate expectation of privacy in information he voluntarily turns over to third parties."

John Simpson of Consumer Watchdog, the advocacy group that discovered the court document, said it suggests that "Google has finally admitted they dont respect privacy."

Media outletsin a number of countries picked up the story, prompting Google to issue a statement on Wednesday.

"We take our users' privacy and security very seriously; recent reports claiming otherwise are simply untrue. We have built industry-leading security and privacy features into Gmail and no matter who sends an email to a Gmail user, those protections apply."

A hearing in the class-action lawsuit is scheduled for Sept. 5.

Shocking admission, or not?

Nate Cardozo, a staff attorney with the Electronic Frontier Foundation, said he wasnt surprised by Googles legal argument.

"Google does more processing than most, but every email server processes emails that come in," Cardozo said by phone. "Someone who runs an email server has to, as a matter of the technology."

'Its alarming for the worlds largest email service provider to say that they dont have an obligation to protect privacy.' Marc Rotenberg, privacy lawyer

He said many email providers scan messages for viruses or spam, while Google has a track record on privacy issues. For example, unlike a number of other major internet companies, Google requires a warrant before it will release data to the U.S. Department of Justice.

Other experts say that Googles handling of the lawsuit should be taken seriously, even if it has to do with automated processing of email for ads.

"Its alarming for the worlds largest email service provider to say that they dont have an obligation to protect privacy," said Marc Rotenberg, who has taught privacy law for 25 years and heads the Electronic Privacy Information Center in Washington, D.C.

He said the lawsuit is noteworthy because, while Gmail users may have consented to having their emails scanned by Google by agreeing to the companys terms of service, non-Gmail users have not provided consent.

Heightened attention to online privacy

The lawsuit against Google, which was filed in May, alleges that the company "unlawfully opens up, reads, and acquires the content of people's private email messages."

Its not surprising the civil case is garnering attention given its timing in the wake of Edward Snowdens revelations about online spying by the U.S. National Security Agency (NSA), said Andrew Clement, who runs the University of Torontos information policy research program.

A series of news reports in recent months revealed thatthe NSA has been secretly collecting massive quantities of information onlinefor years, by accessing the networks ofmajor U.S. internet companies.

"Theres much more acute attention to these issues of privacy and surveillance, who has access," Clement said. "That I think adds to the significance of Googles statement."

Micheal Vonn, policy director at the B.C. Civil Liberties Association, said the court filing highlights the tension between the companys stance on user privacy and its business model.

"Google cant have it both ways. It cant say in terms of this lawsuit, you have no reasonable expectation of privacy in your emails and say at the same time that it is effectively guarding your privacy very seriously," she said by phone.

"The simple fact here is that the business model has always been to capitalize on selling to advertisers, on the basis of the content of your information."