House Commerce Chairmen Henry Waxman (D-CA), Ranking Member Joe Barton (R-TX), and Rep. Edward Markey (D-MA) released a response from Google after the lawmakers sent a letter to the company regarding its collection of private information over Wi-Fi networks.
The Internet giant owned up to the error while seeking to ease concerns about any harms it had caused, noting that the breach arose while it was systematically collecting Wi-Fi network information. This practice led it to mistakenly grab data running over those networks, it said.
"In retrospect, it is clear there should have been greater transparency about the collection of this data," Google said of its Wi-Fi collection program. The company maintained that it did not break the law. "We emphasize that being lawful and being the right thing to do are two different things, and that collecting payload data was a mistake for which we are profoundly sorry," the company wrote, adding that collecting data from openly accessible networks does not violate U.S. law. Signed by public policy director Pablo Chavez, the letter blamed the incident on code mistakenly included in software, which was in Wi-Fi equipment attached to cars surveying neighborhoods for its maps application.
"Transparency and trust are the key cornerstones that form the foundation of strong privacy protections for consumers. It's clear that in this case, Google fell short in both these areas," said Rep Markey.
Rep Barton called the situation "disturbing and ironic" and called for a hearing on the issue, "at minimum." "Google now confesses it has been collecting people's information for years, yet claims they still do not know exactly what they collected and who was vulnerable," he said, referring to a letter Google sent to the committee heads this week in response to their demand for answers on the incident. "This is deeply troubling for a company that bases its business model on gathering consumer data," Barton continued, noting incongruity between the privacy breach and the company's stance that Internet service providers, "but not Google," should be subject to greater regulation.