Google is tracking your online behavior in the name of advertising, reintroducing a data collection process that ingests all of your online signals (from IP address to complex browser information) and pinpoints unique users or devices, also known as "digital fingerprinting."
The company's updated platform program policies include relaxed restrictions on advertisers and personalized ad targeting across a range of devices, an outcome of a larger "advertising ecosystem shift" and the advancement of privacy-enhancing technologies (PETs) like on-device processing and trusted execution environments, in the words of the company.
A departure from its longstanding pledge to user choice and privacy, Google argues these technologies offer enough protection for users while also creating “new ways for brands to manage and activate their data safely and securely." The new feature will be available to advertisers beginning Feb. 16, 2025.
"With new innovations like PETs to mitigate risks, we see an opportunity to set a high privacy bar on the use of data like IP. We can do this by applying privacy-preserving protections that help businesses reach their customers across these new platforms without the need to re-identify them," writes Google. "And because we’re looking to encourage responsible data use as the new standard across the web, we’ll also partner with the broader ads industry and help make PETs more accessible."
In July, Google announced it was backtracking on a decision to kill third-party cookies, instead putting the role of privacy watchdog in the hands of users by adding personalized privacy options to a new product known as the Privacy Sandbox.
Contrary to other data collection tools like cookies, digital fingerprinting is difficult to spot, and thus even harder for even privacy-conscious users to erase or block. On Dec. 19, the UK's Information Commissioner’s Office (ICO) — a data protection and privacy regulator — labeled Google "irresponsible" for the policy change, saying the shift to fingerprinting is an unfair means of tracking users, reducing choice and control over their personal information. The watchdog also warned that the move could encourage riskier advertiser behavior.
"Google itself has previously said that fingerprinting does not meet users’ expectations for privacy, as users cannot easily consent to it as they would cookies. This in turn means they cannot control how their information is collected. To quote Google’s own position on fingerprinting from 2019: 'We think this subverts user choice and is wrong,'" wrote ICO executive director of regulatory risk Stephen Almond.
The ICO warned that it will intervene if Google cannot demonstrate existing legal requirements for such tech, including options to secure freely-given consent, ensure fair processing, and uphold the right to erasure: "Businesses should not consider fingerprinting a simple solution to the loss of third-party cookies and other cross-site tracking signals."
