Live data from Hacker News

What’s stored in a school Google Drive account?

web.archive.org

21–30 of 49 posts

Re: What’s stored in a school Google Drive account?

#22

Weird since my child is in this school district. They also don't mention much about the fact that every child (as far as I know) has a Chromebook provided, so I doubt this would be a common thing where kids are logging into Google Drive on another PC at home.

A lot of school districts allow the chromebooks to go home with the kids and there are ways to manage DNS filtering and chrome app management for those chromebooks. It is very attractive for cash strapped school districts or for eRate projects (every 5 years). G Suite is used by a lot of schools and a lot of teachers do the G Suite educational certifications as well.

Re: What’s stored in a school Google Drive account?

#23
post #10

Earlier quoted context omitted.

I'm pretty sure Google is COPPA compliant and will not let children, without parental consent, sign up for things on their own. However, GSuite for Education may very well introduce a loophole whereby the onus is put on someone else to get that consent. I'm getting that vibe from this knowledge base article: https://support.google.com/a/answer/6356509?hl=en In any case, interesting. This story seems like something Go…

>Google is COPPA compliant and will not let children, without parental consent, sign up for things on their own. How does Google do that? By having a 13 year old agree to Terms and Conditions/EULA (a legal contract), that the child has no legal authority to enter, which states the child obtained legal consent from the parents?

I think it's the parents who are expected to agree to the contract, thereby expressing their consent. Then if a child does it on their own, they are committing fraud against the company, which can then claim to be the victim and deflect all blame.

Re: What’s stored in a school Google Drive account?

#24
post #5

I don't understand. What they are describing sounds like Chrome syncing. But you can certainly install Google Drive's sync client without using Chrome/Chrome syncing. Is this a new thing?

They must have signed into Chrome, but Chrome will explicitly tell the user if their data will be accessible to the GSuite administrator[0] so this is likely on them for not fully reading this popup or forgetting about it. 0: https://judge.sh/YILh0ozLX5.png

[deleted]

Re: What’s stored in a school Google Drive account?

#25
post #23

Earlier quoted context omitted.

>Google is COPPA compliant and will not let children, without parental consent, sign up for things on their own. How does Google do that? By having a 13 year old agree to Terms and Conditions/EULA (a legal contract), that the child has no legal authority to enter, which states the child obtained legal consent from the parents?

I think it's the parents who are expected to agree to the contract, thereby expressing their consent. Then if a child does it on their own, they are committing fraud against the company, which can then claim to be the victim and deflect all blame.

That’s cute but not at all how contract Law works.

Minors don’t have legal authority to enter into contracts, Google can’t claim (at least it’s not a legal defense) they were defrauded by a minor for agreeing to their contract that expressly states the minor will get their parents consent or permission. The burden is on Google.

Google would be liable for collecting data on the minor in violation of law, notwithstanding any agreement the minor agreed to, because that agreement isn’t legally enforceable.

Re: What’s stored in a school Google Drive account?

#27
This sounds like someone who doesn’t have an understanding of how the services they’re using are designed to interact with each other. This is a problem, but it’s not specific to Google: it’s difficult, if not impossible, to ensure that your average user actually understands how these services are meant to work. As the user starts to realize how integrated these services really are, it causes a level of confusion and paranoia; humans fear what they don’t understand. This, in turn, causes them to misunderstand how the services truly integrate; they feel helpless and don’t understand just how much control they have over their own data.

Many of these claims are outright false because they’re technologically infeasible and would require the exploitation of security vulnerabilities. Companies like Google are constantly having their apps inspected by hobbyists and professionals alike; there’s no way that’d go unnoticed for any length of time, plus it’s nearly impossible to begin with.

In short: a parent has just discovered the internet. They’re scared, paranoid, and confused. This is, unfortunately, quite normal.

There are legitimate privacy concerns regarding Google’s collection of data, but none of them are raised in this article. It’s a misunderstanding at best and outright propaganda at worst.

Re: What’s stored in a school Google Drive account?

#28
post #10

Earlier quoted context omitted.

I'm pretty sure Google is COPPA compliant and will not let children, without parental consent, sign up for things on their own. However, GSuite for Education may very well introduce a loophole whereby the onus is put on someone else to get that consent. I'm getting that vibe from this knowledge base article: https://support.google.com/a/answer/6356509?hl=en In any case, interesting. This story seems like something Go…

>Google is COPPA compliant and will not let children, without parental consent, sign up for things on their own. How does Google do that? By having a 13 year old agree to Terms and Conditions/EULA (a legal contract), that the child has no legal authority to enter, which states the child obtained legal consent from the parents?

By not allowing them to do so on their own.

Re: What’s stored in a school Google Drive account?

#29
post #5

I don't understand. What they are describing sounds like Chrome syncing. But you can certainly install Google Drive's sync client without using Chrome/Chrome syncing. Is this a new thing?

They must have signed into Chrome, but Chrome will explicitly tell the user if their data will be accessible to the GSuite administrator[0] so this is likely on them for not fully reading this popup or forgetting about it. 0: https://judge.sh/YILh0ozLX5.png

Being accessible to the G Suite administrator is understandable, but this is saying that anyone with an account on the school's G Suite plan could see the passwords for any other user.

This has to be something where the admins changed some default setting to change the default security on everything in G Suite, so that all other school accounts could have access to it.

Maybe someone intended to set it up so that all google sheets and docs were shared among everyone on the plan, but didn't realize the change they made applied to other things that got synced to G Suite, like Chrome sync passwords?

Re: What’s stored in a school Google Drive account?

#30
post #23

Earlier quoted context omitted.

I think it's the parents who are expected to agree to the contract, thereby expressing their consent. Then if a child does it on their own, they are committing fraud against the company, which can then claim to be the victim and deflect all blame.

That’s cute but not at all how contract Law works. Minors don’t have legal authority to enter into contracts, Google can’t claim (at least it’s not a legal defense) they were defrauded by a minor for agreeing to their contract that expressly states the minor will get their parents consent or permission. The burden is on Google. Google would be liable for collecting data on the minor in violation of law, notwithstandi…

According to this FTC site https://www.ftc.gov/tips-advice/business-center/guidance/chi...

You’re covered by COPPA if:

- Your website or online service is directed to children under 13 and collects personal information from them;

- Your website or online service is directed to a general audience, but you have “actual knowledge” you’re collecting personal information from a child under 13; or

- You run a third-party service like an ad network or plug-in and you’re collecting information from users of a site or service directed to children under 13.

and

Although the Rule doesn’t define the term, the FTC has said that an operator has actual knowledge of a user’s age if the site or service asks for – and receives – information from the user that allows it to determine the person’s age. For example, an operator who asks for a date of birth on a site’s registration page has actual knowledge as defined by COPPA if a user responds with a year that suggests they’re under 13. An operator also may have actual knowledge based on answers to “age identifying” questions like “What grade are you in?” or “What type of school do you go to? (a) elementary; (b) middle; (c) high school; (d) college.”

Note the "if a user responds with a year that suggests they’re under 13" part. If they don't, that would mean that there's no "actual knowledge" that the data being collected is associated with a child under 13. So "they lied to me" does appear to be a valid defense.

Post reply on HN