Earlier quoted context omitted.
> protects the confidentiality For their definition of "confidential", which they can change at any time. > certain limited circumstances If they only intended the "required by law" example, they wouldn't use such a broad - and completely undefined - set of circumstances. > guard against external threats Google may have good security practices now , but an continually growing collection of highly-revealing tracking d…
>they should indemnify the subjects of their spying against any damages those caused by those "external threats" I despise GA as much as the next guy, but you'd have to be pretty crazy to expect any business to provide such a guarantee. Google isn't your insurance company.
Businesses are acting like there is no risk in holding personal information. When people complain, they respond with claims that the data is safe. When businesses act like they are secured and that we should trust them, we should be asking them to stand behind those claims. I agree, this is crazy, but businesses really want to make strong claims but not be bound by those claims. An honest business that actually believed in their own promises shouldn't have problem putting those promises into a formal guarantee.