Google Inc. has agreed to pay a record $22.5 million civil penalty to settle Federal Trade Commission charges that it misrepresented that Apple Inc.'s Safari Internet browser would not place tracking “cookies” or serve targeted ads, violating an earlier privacy settlement between the company and the FTC.
Along with the civil penalty, the order requires Google to disable all the tracking cookies it had said it would not place on consumers’ computers.
The FTC charged that for several months in 2011 and 2012, Google placed a certain advertising tracking cookie on the computers of Safari users who visited sites within Google’s DoubleClick advertising network, although Google had previously told these users they would automatically be opted out of such tracking, as a result of the default settings of the Safari browser used in Macs, iPhones and iPads.
According to the FTC’s complaint, Google specifically told Safari users that because the Safari browser is set by default to block third-party cookies, as long as users do not change their browser settings, this setting “effectively accomplishes the same thing as [opting out of this particular Google advertising tracking cookie].”
Despite these promises, the FTC charged that Google placed the tracking cookies on computers, in many cases by circumventing the Safari browser’s default cookie-blocking setting. Google exploited an exception to the browser’s default setting to place a temporary cookie from the DoubleClick domain.
Because of the particular operation of the Safari browser, that initial temporary cookie opened the door to all cookies from the DoubleClick domain, including the Google advertising tracking cookie that Google had represented would be blocked from Safari browsers.
“The record setting penalty in this matter sends a clear message to all companies under an FTC privacy order,” said Jon Leibowitz, chairman of the FTC. “No matter how big or small, all companies must abide by FTC orders against them and keep their privacy promises to consumers, or they will end up paying many times what it would have cost to comply in the first place.”
Google generates billions of dollars in revenues annually from selling online advertising services, including the delivery of targeted ads online. Cookies are small pieces of computer text that are used to collect information from computers and can be used to serve targeted ads to consumers.
By placing a tracking cookie on a user’s computer, an advertising network can collect information about the user’s Web-browsing activities and use that information to serve online ads targeted to the user’s interests or for other purposes.
The FTC charged that Google’s misrepresentations violated a settlement it reached with the agency in October 2011. That settlement resolved charges that Google used deceptive tactics and violated its privacy promises after launching its social network, Google Buzz.