The gigabyte storage capacity and long memory of Google' planned Web-based e-mail service are making it a big target for privacy campaigners -- and the name, Gmail, could soon be the subject of a trademark dispute, too.
A coalition of 28 privacy and civil liberties groups wrote Google founders Sergey Brin and Larry Page a letter Tuesday urging them to think again about the service, which they said sets potentially dangerous precedents for the automated scanning of private communications. The service may conflict with European privacy laws, and should be suspended until privacy issues are addressed, they wrote.
The letter's signatories include the World Privacy Forum, the Privacy Rights Clearinghouse, Bits of Freedom, the Consumer Federation of America, the Electronic Privacy Information Center, the Foundation for Information Policy Research and Privacy International.
When Google announced the Gmail service on March 31, the company said it will scan the text of all incoming e-mail in order to place appropriate advertisements. This is a bad idea, according to the privacy campaigners, because "The scanning of confidential email violates the implicit trust of an email service provider."
Many e-mail systems already scan message content in an effort to block spam, but inserting ads in incoming e-mail is fundamentally different than removing harmful viruses and unwanted spam, the campaigners said. Inserting ads on the fly requires a chain of directories, databases and logs, and a long memory. Those auditing trails could be correlated with data collected from Google's search site, or social networking site Orkut, they said.
Google Vice President of Engineering Wayne Rosing sought to reassure the campaigners: The Gmail user's name is not sent to the ad server, and when the system scans the email, it does not look at the To or From fields, only the subject and body of the mail, he said in an interview.
Whatever the details of Gmail's scanning process, it sets dangerous precedents and reduces users' expectations of the privacy of e-mail, the civil liberties groups said.
"These precedents may be adopted by other companies and governments and may persist long after Google is gone," they said.
One of the letter's signatories emphasized this danger in a phone interview.
"The mail is not just being scanned, it's also being indexed, and governments might want to know if a word is in the index, and if so, who used it," said Maurice Wessling of Bits of Freedom, a civil liberties organization in Amsterdam.
Gmail will offer users a gigabyte of online storage, enough that they will never need to delete another message, according to the service's Web site. Indeed, the Gmail privacy policy warns that messages, even if "deleted," may still be stored in the system long after users have closed their account -- something that bothers the privacy campaigners.
"The unlimited period for data retention poses unnecessary risks of misuse," they wrote, adding that Google's policies on retaining data and correlating it between business units are problematic, lacking clarity and being too broad in scope. The company should set clear limits on how long it will retain user account, email and transactional data, and provide clear written policies about data sharing, they wrote.
Setting out these policies clearly and precisely is vital if Google is to remain within the law: As it stands, they said, Gmail may conflict with a European Union directive on privacy that users' consent must be informed, specific and unambiguous.
Rosing said Google believes its policies are clearly laid out and protect users' privacy. "We're committed to protecting user privacy to the maximum extent that we can do while at the same time abiding by the law," he said.
However good Google's intentions, they're worth nothing if the company folds, said one observer.
"There have already been cases where dot-coms with a sound privacy policy went bankrupt and had to sell their user database to companies with worse privacy policies," said Christian Mock, a spokesman for Austrian campaign group Quintessenz, which styles itself an association for the re-establishment of the citizen rights in the information age.
No one knows the likelihood of Google going under, since the company is not quoted on the stock exchange and nobody knows about its financial data, Mock wrote in an e-mail.
Google may have some other protecting to do. Days after it announced the details of Gmail, its trademark is already being disputed. Following Google's use of the name Gmail in a press release, financial service provider The Market Age (TMA) registered its interest in the name with the U.S. Patent and Trademark Office, the British company said in a news release Tuesday.
TMA launched a Web-based e-mail service called Gmail in mid-2002 as part of an online share price and currency exchange rate analysis service offered by subsidiary Pronet Analytics.com, it said. Pronet's Gmail allows subscribers to annotate stock price charts and forward them by e-mail. The company is seeking advice on how to protect its intellectual property, it said.
(With additional reporting by Stephen Lawson in San Francisco.)
