Online Privacy Thread: Remove Your Number, Email or Address from Google Search Results

[5 STAR U-G-A]

You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results
April 29, 2022
https://krebsonsecurity.com/2022/04...il-or-address-from-search-results/#more-59639

Google said this week it is expanding the types of data people can ask to have removed from search results, to include personal contact information like your phone number, email address or physical address. The move comes just months after Google rolled out a new policy enabling people under the age of 18 (or a parent/guardian) to request removal of their images from Google search results.

Google has for years accepted requests to remove certain sensitive data such as bank account or credit card numbers from search results. In a blog post on Wednesday, Google’s Michelle Chang wrote that the company’s expanded policy now allows for the removal of additional information that may pose a risk for identity theft, such as confidential log-in credentials, email addresses and phone numbers when it appears in Search results.

“When we receive removal requests, we will evaluate all content on the web page to ensure that we’re not limiting the availability of other information that is broadly useful, for instance in news articles,” Chang wrote. “We’ll also evaluate if the content appears as part of the public record on the sites of government or official sources. In such cases, we won’t make removals.”

While Google’s removal of a search result from its index will do nothing to remove the offending content from the site that is hosting it, getting a link decoupled from Google search results is going to make the content at that link far less visible. According to recent estimates, Google enjoys somewhere near 90 percent market share in search engine usage.

KrebsOnSecurity decided to test this expanded policy with what would appear to be a no-brainer request: I asked Google to remove search result for BriansClub, one of the largest (if not THE largest) cybercrime stores for selling stolen payment card data.

BriansClub has long abused my name and likeness to pimp its wares on the hacking forums. Its homepage includes a copy of my credit report, Social Security card, phone bill, and a fake but otherwise official looking government ID card.

The login page for perhaps the most bustling cybercrime store for stolen payment card data.

Briansclub updated its homepage with this information in 2019, after it got massively hacked and a copy of its customer database was shared with this author. The leaked data — which included 26 million credit and debit card records taken from hacked online and brick-and-mortar retailers — was ultimately shared with dozens of financial institutions.

TechCrunch writes that the policy expansion comes six months after Google started allowing people under 18 or their parents request to delete their photos from search results. To do so, users need to specify that they want Google to remove “Imagery of an individual currently under the age of 18” and provide some personal information, the image URLs and search queries that would surface the results. Google also lets you submit requests to remove non-consensual explicit or intimate personal images from Google, along with involuntary fake pornography, TechCrunch notes.

This post will be updated in the event Google responds one way or the other, but that may take a while: Google’s automated response said: “Due to the preventative measures being taken for our support specialists in light of COVID-19, it may take longer than usual to respond to your support request. We apologize for any inconvenience this may cause, and we’ll send you a reply as soon as we can.”

Update: 10:30 p.m. ET: An earlier version of this story incorrectly stated that people needed to show explicit or implicit threats regarding requests to remove information like one’s phone number, address or email address from a search result. A spokesperson for Google said “there is no requirement that we find the content to be harmful or shared in a malicious way.”

 

[5 STAR U-G-A]

New options for removing your personally identifiable information from Search
Apr 27, 2022
Michelle Chang
Global Policy Lead for Search
https://blog.google/products/search...sonally-identifiable-information-from-search/

Privacy and online safety go hand in hand. And when you’re using the internet, it’s important to have control over how your sensitive, personally identifiable information can be found.

On Google Search, we already have a set of policies that allow people to request the removal of certain content from Search, with a focus on highly personal content that, if public, can cause direct harm to people. But the internet is always evolving – with information popping up in unexpected places and being used in new ways — so our policies and protections need to evolve, too.

Open access to information is a key goal of Search, but so is empowering people with the tools they need to protect themselves and keep their sensitive, personally identifiable information private. That’s why we’re updating our policies to help people take more control of their online presence in Search.

Request the removal of personally identifiable information that appears in Google Search
For many years, people have been able to request the removal of certain sensitive, personally identifiable information from Search — for example, in cases of doxxing, or information like bank account or credit card numbers that could be used for financial fraud.

Under this new policy expansion, people can now request removals of additional types of information when they find it in Search results, including personal contact information like a phone number, email address, or physical address. The policy also allows for the removal of additional information that may pose a risk for identity theft, such as confidential log-in credentials, when it appears in Search results.

The availability of personal contact information online can be jarring — and it can be used in harmful ways, including for unwanted direct contact or even physical harm. And people have given us feedback that they would like the ability to remove this type of information from Search in some cases.

When we receive removal requests, we will evaluate all content on the web page to ensure that we're not limiting the availability of other information that is broadly useful, for instance in news articles. We'll also evaluate if the content appears as part of the public record on the sites of government or official sources. In such cases, we won't make removals.

It’s important to remember that removing content from Google Search won’t remove it from the internet, which is why you may wish to contact the hosting site directly, if you're comfortable doing so.

We’re always looking for new ways to ensure our policies and built-in safeguards reflect peoples’ evolving needs and are easy to use. For example, in addition to this update, we recently rolled out a new policy to enable people under the age of 18 (or their parent or guardian) to request the removal of their images from Google Search results.

Maximizing access to information while empowering people to be in control of their sensitive, personally identifiable information is a critical balance to strike. We believe these updates are an important step to deliver on that goal and give people the tools they need to protect their safety and privacy online.

To learn more about how you can make use of this expanded policy, visit our help page.