Google is mis-directing here. It is obvious what I mean when I say "Delete me from all your servers". I don't care what country those servers are in. This is not a freedom of expression vs privacy issue. This is people being in charge of their behavioral and historical data that google has locked up in their data silos. Framing it otherwise is disingenuous. I'm still free to express myself however I want on whatever forums I choose. Whether google gets to freely index and profit from it is the real question except their lawyers are trying to make it sound like they're champions of freedom of expression.
It's obvious what you mean, but it's not obvious how or why an EU law means Google has to change data in their datacenters in the USA for someone searching from Brazil.
What if Australia ruled that Google must keep all data on all people worldwide and forbid deletions. Should that override all other country laws? If not, why should the EU law affect other countries?
> This is people being in charge of their behavioral and historical data that google has locked up in their data silos.
It's not "their" data. People clicked "I agree", and it's someone else's data now. People aren't in charge of it, they never have been.
It's obvious what you mean, but it's not obvious how or why an EU law means Google has to change data in their datacenters in the USA for someone searching from Brazil.
It is very simple. A country (or union) can require businesses that operate in their country to fulfill a set of rules. One of the rules could be that it should be possible for any user of the service to remove their data.
Although a country cannot enforce these rules globally in the strict sense, it can forbid the company to operate in that country until it operates within the boundaries of the law. Some companies will relent to get access to that market.
(Whether this is a good idea is another question.)
Yes, and France runs the risk of Google saying "well, FU France" and closing its offices and presence there. If they try to enforce at the EU level, same thing.
"Pulling out" of the EU means closing a few small offices (except for Dublin). It has no significant staff presence outside of Ireland in the EU once the UK leaves - the offices in France and Germany are really small.
If Google decides to start moving staff out of Dublin, the EU would lose its last leverage over it.
The EU could then do a China and attempt to force ISPs to block Google services at the network level. Given how much the web relies on Google servers, that would break the EU internet. The EU is struggling already, there's no way they're going to shoot themselves in the head economically like that.
"it can forbid the company to operate in that country "
What does that even mean on the internet?
IE what do you expect them to do, and why is it the company's' problem?
Do you really believe if Google, Facebook, whoever, was to close up all their physical shop in say, France, and take no affirmative steps to "operate a business" there (IE they don't try to explicitly block folks, but tell them not to do it and don't do it themselves) France would declare whatever they want to do okay?
Of course not.
It's pretty irrelevant where they do business, examples abound of countries where none of these companies have explicit presences trying to regulate them. None of this would be any different if they were entirely located, and declared all profit, inside, say, the US. The argument would be slightly more tortured, but the EU/etc would make it and do everything they could to hold these companies to it.
(and you don't want to try the "they operate a business wherever they earn profit", as this is even more fuzzy, as opinions differ on what profit is earned where, even if you ignore the tax issues. In fact, you can already see the countries don't want to make that argument because they don't like the answers it gives!).
Since Google is pretty polarizing, let's take HN instead.
Imagine someone in France files a RTBF request against HN for continuing to index an HN story about a crime they "paid their time for".
HN has no presence in France (i think! :P). Do you really believe France is going to say "yeah, you are right, do whatever you want"? That seems ... really really unlikely.
It's also pretty clearly not HN's job to say, try to deliberately exclude french citizens from participating.
So what do you want them to do, exactly?
They are kind of screwed no matter what they do[1]
The truth is, this is the problem with international legal jurisdiction in the internet world.
All countries/unions/what have you want their jurisdiction to be as expansive as possible. Historically, these jurisdiction were limited by physical borders, military might/willpower or allied treaties.
But they all (US included) see ways to expand their jurisdiction when it comes to internet companies, as their digital footprints are often much larger than their physical ones.
So, as expected, they all try to claim it, because it is to their political/legal/social/trade advantage to do so. If they don't, nobody will ever care about them at all. IE If i can easily make globally successful companies that doesn't have to care about EU law, but still derives benefit from EU citizens voluntary using it, why would any company want to care about the EU?
This is why it does not matter where they "operate a business" or any other metric you can come up with. The metric is really "able to be successful and used by citizens of X without really being subject to the direct legal jurisdiction of X". Any time this happens, X will claim, through whatever argument they can, that the company is subject to their legal jurisdiction/regulations. Because if what they really cared about was anything else, these countries, like China, would just block the website/story/whatever inside their borders! They certainly have such power. Instead, they want the foreign website to recognize and submit to their authority, so that the country/union/etc stays relevant.
It's really not about anything else, and for pretty much all of these companies, there is no real way out.
[1] This is usually the point where the argument devolves into extremism, and people suggest that if these companies simply collected no data, they would never have problems. This is, IMHO, pretty naive as well, as they have the same problems above whether they are being asked to remove data, or keep it, or what have you. The data issue is just one that happens to involve something people seem passionate about, but it is far from the only issue that arises. This is about the joy of legal jurisdiction in a world without borders. It applies equally well to things vastly unrelated to issues like RTBF.
> What if Australia ruled that Google must keep all data on all people worldwide and forbid deletions. Should that override all other country laws? If not, why should the EU law affect other countries?
This is already the current situation and it's a mess.
Countries have laws to force removal of personal information if the user requests it. Other countries have laws to force the company to keep user information for X years.
It's a total mess. Just f* the law and pretend that everything is alright when you do the certifications :D
Great point about the other side of the coin about retention policies. The bottom line is that neither retention nor deletion is currently possible. Isn't that really the issue? If Australia wanted to retain whatever data google had then surely some kind of export functionality would be the answer for that use case. If google's retention policies were by some miracle something like 1 year instead of forever that is.
> This is people being in charge of their behavioral and historical data that google has locked up in their data silos.
Why are you using intentionally strongly connoted language like "be in charge", "locked up", and "silo"? A more accurate version of this statement is "This is people wanting to make someone else delete data that they have on their servers." You're also presuming that someone "owns" any and all data that pertains to them.
Effectively legal? It is legal. I can privately crawl the web for all references to "John Doe", "johndoe.com", "/u/johndoe28", etc, and save them, because it's all content that John Doe chose to make publically available, whether on his own website or on forum posts or Facebook or what.
There's probably some point at which the ways I use that data can be classified as stalking or harassment, but simply collecting it is allowed.
There are far more sources of information than what John Doe explicitly puts out there. Those are probably the least of his worries.
What about the embarrassing things other people post about John Doe? What if this harms his ability to provide for his family?
What about things fabricated by others to silence or overtake John Doe?
edit: (adding the point below)
Just because it's legal to collect, manipulate, and profit from this mass of information 'somewhere' doesn't mean that concerned groups of people shouldn't try to make that process harder or impossible.
> What about the embarrassing things other people post about John Doe?
Is "John Doe" a politician trying to suppress public discourse about a scandal?
If you do something embarrassing, and people are talking about it, it is absolutely immoral to use government force to prevent people from disseminating information about it.
> What if this harms his ability to provide for his family?
Of course, think of the children. We must suppress any information that could negatively affect a hypothetical child!
What Google does is not "surveillance", it's collation of public data (or data that you agreed to give to google via one of its private services, like gmail). What the NSA does is surveillance, which is collection of private data without consent.
> what kind of world does that lead to?
A world where public discourse is more conveniently indexed? Be explicit with your concerns.
I think your version of the intent is correct but the post by the author makes it sound like google here is a champion of something virtuous when in reality they're just protecting their own business interests. If google was a publicly funded operation and their indexing/search algorithms were in the public domain then they might be able to make a convincing case but as it is there is clearly misdirection going on here.
From where I stand they are trying to take advantage of the murky definitions around data retention and various policies applicable to personally identifiable information to side-step certain restrictions in various countries that have much stronger policies around use cases of such data.
