Google LLC’s privacy practices are in the spotlight after, ironically, a database detailing its privacy investigations from 2013 and 2018 has been leaked.

The database details a wide range of incidents across various Google apps and products, including Waze, YouTube and AdWords, that have not been previously made public. Obtained by 404 Media, it allegedly details a range of privacy investigations undertaken by Google. The data is ranked by priority and provides details of instances of data collection that, despite Google’s own transparency policies, have never been disclosed.

The leaked database, consisting of incidents that were reported internally by Google employees, includes privacy breaches such as accidentally collecting children’s voice data through the Gboard microphone, leaking internal YouTube content from Nintendo Co. Ltd., gathering license place data information from Street View and other privacy breaches.

The Nintendo video is of particular interest to gamers, as it involved a Google contractor leaking early look information about a game called Yoshi’s Crafted World. It’s alleged that a temporary vendor contractor downloaded a video of the game before it was released by Nintendo by using their YouTube admin access to gain access to the video before sharing it with friends. As The Verge notes, when images were first shared, the URL in the screenshot was admin.youtube.com.

Other examples of privacy concerns in the database include data inappropriately gathered, distributed or leaked by Google applications. Notable examples include YouTube making recommendations based on videos users had deleted from their watch history, YouTube videos uploaded as unlisted or private appearing publicly, an issue with Waze that leaked trips and home addresses of users and a person modifying AdWords to manipulate tracking codes on ads.

While the database leak is undoubtedly embarrassing for Google and certainly highlights its lack of transparency efforts, the findings in the database aren’t all that bad.

Putting aside that the database only details investigations from 2013 to 2018, the fact that Google was investigating internally reported privacy breaches and concerns is actually a positive in itself. Although Google has long dropped its “Don’t be evil” motto, it would be nice for it to at least try to be more transparent about data and privacy breaches, including when they involve its own employees.

Photo: Google