Google’s troubles over using unsecured Wi-Fi networks for image collection for its Street View service may be long over in Europe, but the US is proving a much less forgiving on the matter. The search giant suffered a blow in its attempt to draw a lilne under the debacle this week when an appeals court once again rejected Google’s argument that using networks without their owners’ consent did not break federal wiretap laws.
In a ruling, the US Court of Appeals for the Ninth Circuit held that payload data transmitted over a Wi-Fi network is not ‘radio communications’ as defined under the federal Wiretap Act and as claimed by Google. That means the company cannot claim an exemption for its Wi-Fi data collection under the Wiretap Act.
The appellate court also rejected Google’s petition for an en banc, or full court, review of the case. The opinion clears the way for a lawsuit filed against Google over its Street View data collection to proceed in District Court.
“The Ninth Circuit’s ruling in the Google Street View case is significant because the court affirmed its previous holding that Wi-Fi communications are protected under the Wiretap Act,” said Alan Butler appellate advocacy counsel with the Electronic Privacy Information Center (EPIC).
“Google has been subject to investigation in the US and Europe for its collection of private Wi-Fi communications, and the court’s refusal to dismiss this case shows that this collection might have violated federal law,” Butler said.
In 2010, Google admitted that its Street View cars had inadvertently captured data transmitted over open Wi-Fi networks when shooting photos. The company apologised for its actions and said it would destroy or render inaccessible close to 650Gb of data it had collected from Wi-Fi networks.
Several individuals later sued, claiming Google had violated the Wiretap Act, which prohibits the intentional interception of electronic data. In the lawsuit, the plaintiffs noted that Google’s Street View cars had recorded a considerable amount of data from open Wi-Fi networks including SSIDs, MAC addresses and even payload data such as personal e-mails, passwords, videos and documents.
Google claimed that its actions were legal because the only data it collected was data that was unencrypted and freely available to the general public over unsecured wireless networks. The company claimed that people who did not take affirmative action to protect their data on wireless network should no expectations of privacy over the data.
It likened unsecured wireless data to open radio communications and claimed that the Wiretap Act did not offer any privacy protections to the data.
A District Court judge who heard the case rejected Google’s argument and held that wireless data is very different from radio communications and therefore enjoys specific privacy protections.
Last September, the Ninth Circuit upheld the District Court’s ruling after Google filed an appeal. This week’s ruling reaffirms that opinion.
However, it also deletes a significant portion of the earlier ruling in which the court held that unencrypted communications sent from or received by an open Wi-Fi network was not generally accessible to the public. The court also granted a Google request for a rehearing of the case.
A Google spokesman expressed muted satisfaction over the developments. “We’re pleased that the Court granted our request for a rehearing and revised its opinion. But we are disappointed that the order was not completely reversed and are considering our next steps.”
Google faced mild sanctions in Europe for it’s use of data from unsecured networks, ranging from an agreement to destroy data collected to paying a modest (by its standard) fine.
Computerworld
Ltd
