Google will pay $22.5 million to settle charges it bypassed the privacy settings of customers using Apple's Safari browser, the US Federal Trade Commission has confirmed.
The deal ends an FTC probe into allegations that Google used computer code known as "cookies" to trick the Safari browser on iPhones and iPads so the internet search company could monitor users who had blocked such tracking.
The practice was in violation of a 2011 consent decree Google had negotiated with the FTC over botched rollouts of the social network Buzz, which is now defunct.
Companies such as Google and Facebook rely on collecting user data for a large part of their revenue, but lawmakers and privacy advocates have argued that tech companies are generally not doing enough to safeguard customer privacy.
Both Google and Facebook last year agreed to 20 years of audits to ensure consumers' privacy after the FTC found they had engaged in deceptive privacy practices.
No matter how big or small, all companies must keep their privacy promises to consumers.
"No matter how big or small, all companies must abide by FTC orders against them and keep their privacy promises to consumers," FTC Chairman Jon Leibowitz said in a statement.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
Google was not required to admit to any liability, and the settlement does not constitute an admission of wrongdoing.
It was the largest penalty ever placed on a company for violating an FTC order, yet the fine is a drop in the bucket compared to Google's second-quarter revenue of $12.21 billion.
"The Commission has allowed Google to buy its way out of trouble for an amount that probably is less than the company spends on lunches for its employees and with no admission it did anything wrong," said John Simpson, privacy project director for the nonprofit Consumer Watchdog.
The group said unless Google admitted to violating the FTC order, it planned to try to block the settlement, which needs court approval.
Still, revelations of the privacy misstep embarrassed Google. David Vladeck, director of the FTC's Bureau of Consumer Protection, acknowledged the penalty may seem small, but said it sends a clear message to protect privacy in the future.
"We have Google under order for another 19 years ... and if there's further violations, one could anticipate that the Commission would insist on increasingly higher civil penalties," Vladeck said on a call with reporters.
Google also must disable the tracking cookies that ended up on Safari users' computers and devices after visiting websites in Google's DoubleClick advertising network, despite assurances they would not be tracked due to Safari's default settings.
Google is also the subject of a wide-ranging antitrust investigation by the FTC and European regulators over accusations it manipulated search results to favor its own products.
ITPro is a global business technology website providing the latest news, analysis, and business insight for IT decision-makers. Whether it's cyber security, cloud computing, IT infrastructure, or business strategy, we aim to equip leaders with the data they need to make informed IT investments.
For regular updates delivered to your inbox and social feeds, be sure to sign up to our daily newsletter and follow on us LinkedIn and Twitter.