Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

New Mexico Sues Google Over Collection of Children’s Data

New Mexico’s attorney general sued Google Thursday over allegations the tech company is illegally collecting personal data generated by children in violation of federal and state laws.

New Mexico’s attorney general sued Google Thursday over allegations the tech company is illegally collecting personal data generated by children in violation of federal and state laws.

The lawsuit filed in U.S. District Court in Albuquerque claims Google is using its education services package that is marketed to school districts, teachers and parents as a way to spy on children and their families.

Attorney General Hector Balderas said that while the company touts Google Education as a valuable tool for resource-deprived schools, it is a means to monitor children while they browse the internet in the classroom and at home on private networks. He said the information being mined includes everything from physical locations to websites visited, videos watched, saved passwords and contact lists.

The state is seeking unspecified civil penalties.

“Student safety should be the number one priority of any company providing services to our children, particularly in schools,” Balderas said in a statement. “Tracking student data without parental consent is not only illegal, it is dangerous.”

Google dismissed the claims as “factually wrong,” saying the G Suite for Education package allows schools to control account access and requires that schools obtain parental consent when necessary.

“We do not use personal information from users in primary and secondary schools to target ads,” said company spokesman Jose Castaneda. “School districts can decide how best to use Google for education in their classrooms and we are committed to partnering with them.”

UnlikeEurope, the U.S. has no overarching national law governing data collection and privacy. Instead, it has a patchwork of state and federal laws that protect specific types of data, such as consumer health, financial information and the personal data generated by younger children.

Advertisement. Scroll to continue reading.

New Mexico’s claim cites violations of the state’s Unfair Practices Act and the federal Children’s Online Privacy Protection Act, which requires websites and online services to obtain parental consent before collecting any information from children under 13. In a separate case, Google already has agreed to pay $170 million combined to the Federal Trade Commission and New York state to settle allegations its YouTube video service collected personal data on children without their parents’ consent.

According to the New Mexico lawsuit, outside its Google Education platform, the company prohibits children in the U.S. under the age of 13 from having their own Google accounts. The state contends Google is attempting to get around this by using its education services to “secretly gain access to troves of information” about New Mexico children.

The attorney general’s office filed a similar lawsuit against Google and other tech companies in 2018, targeting what Balderas described as illegal data collection from child-directed mobile apps. That case still is pending in federal court, but the companies have denied wrongdoing.

The latest lawsuit claims more than 80 million teachers and students use Google’seducation plaform. Balderas said in a letter to New Mexico school officials that there was no immediate harm if they continue using the products and that the lawsuit shouldn’t interrupt activities in the classroom.

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Bill Dunnion has joined telecommunications giant Mitel as Chief Information Security Officer.

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

CISO Conversations

In this issue of CISO Conversations we talk to two CISOs about solving the CISO/CIO conflict by combining the roles under one person.

CISO Strategy

Security professionals understand the need for resilience in their company’s security posture, but often fail to build their own psychological resilience to stress.