Privacy

Europe clears Google-Fitbit with a ten-year ban on using health data for ads

Comment

Image Credits: Fitbit

Europe has greenlit Google’s $2.1BN acquisition of fitness wearable maker Fitbit, applying a number of conditions intended to shrink competition concerns over letting it gobble a major cache of health and wellness data following months of regulatory scrutiny of the deal.

While Google announced its plan to buy Fitbit over a year ago, it only notified the transaction to the Commission on June 15, 2020 — meaning it’s taken half a year to be given a caveated go-ahead by Europe. It is also now facing formal antitrust charges on its home turf — from more than one angle (though not related to Fitbit).

Under the terms of the EU’s clearance for ‘Gitbit’, Google has committed to not use the Fitbit data of users in the European Economic Area for ad targeting purposes for a ten-year period.

It says it will maintain a technical separation between health and wellness data collected via Fitbit wearables in a data silo kept separate from other Google data.

It has also committed to ensuring that regional users have an “effective choice” to grant or deny the use of health and wellness data stored in their Google Account or Fitbit Account by other Google services — such as Google Search, Google Maps, Google Assistant, and YouTube. But it’ll be interesting to see how much dark pattern design gets applied there.

Interestingly, the Commission says it may decide to extend the duration of the decade-long Ads Commitment by up to an additional ten years — if such an extension can be justified.

It further notes that clearance is conditional upon full compliance with all the commitments — the implementation of which will be monitored by a trustee, who must be appointed before the transaction can close.

This yet-to-be-appointed-person will have what the Commission couches as “far-reaching competences” — including access to “Google’s records, personnel, facilities or technical information”.

So EU regulators are taking a ‘trust but verify’ approach to letting this big tech merger steamroller on.

Google gobbling Fitbit is a major privacy risk, warns EU data protection advisor

There are further competition focused commitments, too.

Here, Google has agreed to maintain access to Fitbit users’ data via a web API without charging third party developers for the access (of course subject to user consent).

It has also agreed to a number of commitments related to rival wearable makers’ access to Android APIs — saying it will continue free licensing for all core functionality competing devices need to plug into its dominant smartphone OS, Android.

Improvements in device functionality are covered under the agreement, per the Commission, so it’s intended to allow rival wearable makers to continue to be able to innovate without the risk of making a better/more capable device resulting in them being shut out of the Android ecosystem.

Google must also maintain API support in the Android Open Source Project version of its mobile platform.

Another concession the Commission has extracted from Google during this half year of investigation and negotiation is to say it won’t seek to circumvent the requirement to support rivals’ kit accessing Android via the API by degrading the user experience (such as by displaying warnings or error messages).

That’s — frankly — a pretty dysfunctional signal for a regulatory clearance to have to send. And it highlights the level of mistrust that has built up about how Google’s business operates.

Which in turn raises the existential question for EU regulators of why they are allowing themselves to bend over and let Google-Fitbit go ahead. Unsurprisingly, then, the Commission’s PR sounds a tad defensive — with EU lawmakers writing that the decision “is without prejudice to the Commission’s efforts to ensure fair and contestable markets in the digital sector, notably through the recently proposed Digital Markets Act” (DMA).

It also notes that the monitoring trustee will be entitled to share reports that it provides to the Commission with Google’s lead data protection supervisor, the Irish Data Protection Commission. (Though given the massive big tech-related case backlog on its desk — including a number of investigations into other elements of Google’s business — that’s unlikely to cause Mountain View any extra sleepless nights.)

The Commission does also say that commitments secured from Google include “a fast track dispute resolution mechanism that can be invoked by third parties”. So it’s clearly trying to go the extra mile to justify greenlighting further consolidation in a consumer digital services space that Google already massively dominates — at a time when US lawmakers are headed in the opposite direction. So, um…

Civil society in Europe (and beyond) has been raising a massive clamour about the Google-Fitbit acquisition ever since it was announced — urging the bloc’s regulators to stop the tech giant from gobbling Fitbit’s cache of health data, unless or until human rights protections can be guaranteed.

Today the Commission has sidestepped those wider rights concerns.

At best it believes it’s kicked the can down the road a decade or, max, two. And by 2030 (or 2040) it will hope that rules it’s just proposed to put strictures on digital gatekeepers like Google will be in a position to prevent future abuse in check.

The EU’s oft stated preference is to regulate tech giants, not to break up their empires — or, as it turns out, stand in the way of further empire expansion.

Commenting on the Google-Fitbit clearance in a statement, Vestager said: “We can approve the proposed acquisition of Fitbit by Google because the commitments will ensure that the market for wearables and the nascent digital health space will remain open and competitive. The commitments will determine how Google can use the data collected for ad purposes, how interoperability between competing wearables and Android will be safeguarded and how users can continue to share health and fitness data, if they choose to.”

Taking questions from a European parliament committee last week, Vestager signalled the inexorable looming clearance of Gitbit — saying the US and Europe have a different approach to dealing with market-dominating tech giants. “In Europe we do not have a ban of monopolies,” she told MEPs. “They have a different legal basis in the U.S. We would say you’re more than welcome to be successful but with success comes responsibility — which is why we have article 102 [against abusing a dominant position].”

It’s also why the Commission has felt the need to propose new regulation to strengthen competition enforcement in digital markets — though it’ll most likely be years before the DMA is adopted.

And in the meanwhile EU regulators are letting Google expand its dominance of people’s private information by bagging up Fitbit’s treasure trove of sensitive health data — for full exploitation later.

In any case, as Harvard professor Shoshana Zuboff warned last week, surveillance capitalism’s business ambitions now scale far beyond mere targeted ads. The goal is to use data “for the sake of predictions that become more lucrative as they approach certainty”, as she put it — warning society must intervene in the public interest to put a stop to the tech giants’ “epistemic coup”. 

Accurate predictions generated off of health data could be very lucrative indeed for Google (which has been ramping up its focus on the health sector in recent years).

Whether that’s net good or bad for humanity remains to be seen — which isn’t the kind of major gamble regulators should be comfortable with. So plenty will say the Commission is just fiddling round the margins while giving big tech a handy bypass for competition enforcement.

Europe urged to block Google-Fitbit ahead of major digital policy overhaul

Google gobbling DeepMind’s health app might be the trust shock we need

More TechCrunch

Facebook and Instagram are under formal investigation in the European Union over child protection concerns, the Commission announced Thursday. The proceedings follow a raft of requests for information to parent…

EU opens child safety probes of Facebook and Instagram, citing addictive design concerns

Bedrock Materials is developing a new type of sodium-ion battery, which promises to be dramatically cheaper than lithium-ion.

Forget EVs: Why Bedrock Materials is targeting gas-powered cars for its first sodium-ion batteries

Private equity giant Thoma Bravo has announced that its security information and event management (SIEM) company LogRhythm will be merging with Exabeam, a rival cybersecurity company backed by the likes…

Thoma Bravo’s LogRhythm merges with Exabeam in more cybersecurity consolidation

Consumer protection groups around the European Union have filed coordinated complaints against Temu, accusing the Chinese-owned ultra low-cost e-commerce platform of a raft of breaches related to the bloc’s Digital…

Temu accused of breaching EU’s DSA in bundle of consumer complaints

Here are quick hits of the biggest news from the keynote as they are announced.

Google I/O 2024: Here’s everything Google just announced

The AI industry moves faster than the rest of the technology sector, which means it outpaces the federal government by several orders of magnitude.

Senate study proposes ‘at least’ $32B yearly for AI programs

The FBI along with a coalition of international law enforcement agencies seized the notorious cybercrime forum BreachForums on Wednesday.  For years, BreachForums has been a popular English-language forum for hackers…

FBI seizes hacking forum BreachForums — again

The announcement signifies a significant shake-up in the streaming giant’s advertising approach.

Netflix to take on Google and Amazon by building its own ad server

It’s tough to say that a $100 billion business finds itself at a critical juncture, but that’s the case with Amazon Web Services, the cloud arm of Amazon, and the…

Matt Garman taking over as CEO with AWS at crossroads

Back in February, Google paused its AI-powered chatbot Gemini’s ability to generate images of people after users complained of historical inaccuracies. Told to depict “a Roman legion,” for example, Gemini would show…

Google still hasn’t fixed Gemini’s biased image generator

A feature Google demoed at its I/O confab yesterday, using its generative AI technology to scan voice calls in real time for conversational patterns associated with financial scams, has sent…

Google’s call-scanning AI could dial up censorship by default, privacy experts warn

Google’s going all in on AI — and it wants you to know it. During the company’s keynote at its I/O developer conference on Tuesday, Google mentioned “AI” more than…

The top AI announcements from Google I/O

Uber is taking a shuttle product it developed for commuters in India and Egypt and converting it for an American audience. The ride-hail and delivery giant announced Wednesday at its…

Uber has a new way to solve the concert traffic problem

Google is preparing to launch a new system to help address the problem of malware on Android. Its new live threat detection service leverages Google Play Protect’s on-device AI to…

Google takes aim at Android malware with an AI-powered live threat detection service

Users will be able to access the AR content by first searching for a location in Google Maps.

Google Maps is getting geospatial AR content later this year

The heat pump startup unveiled its first products and revealed details about performance, pricing and availability.

Quilt heat pump sports sleek design from veterans of Apple, Tesla and Nest

The space is available from the launcher and can be locked as a second layer of authentication.

Google’s new Private Space feature is like Incognito Mode for Android

Gemini, the company’s family of generative AI models, will enhance the smart TV operating system so it can generate descriptions for movies and TV shows.

Google TV to launch AI-generated movie descriptions

When triggered, the AI-powered feature will automatically lock the device down.

Android’s new Theft Detection Lock helps deter smartphone snatch and grabs

The company said it is increasing the on-device capability of its Google Play Protect system to detect fraudulent apps trying to breach sensitive permissions.

Google adds live threat detection and screen-sharing protection to Android

This latest release, one of many announcements from the Google I/O 2024 developer conference, focuses on improved battery life and other performance improvements, like more efficient workout tracking.

Wear OS 5 hits developer preview, offering better battery life

For years, Sammy Faycurry has been hearing from his registered dietitian (RD) mom and sister about how poorly many Americans eat and their struggles with delivering nutritional counseling. Although nearly…

Dietitian startup Fay has been booming from Ozempic patients and emerges from stealth with $25M from General Catalyst, Forerunner

Apple is bringing new accessibility features to iPads and iPhones, designed to cater to a diverse range of user needs.

Apple announces new accessibility features for iPhone and iPad users

TechCrunch Disrupt, our flagship startup event held annually in San Francisco, is back on October 28-30 — and you can expect a bustling crowd of thousands of startup enthusiasts. Exciting…

Startup Blueprint: TC Disrupt 2024 Builders Stage agenda sneak peek!

Mike Krieger, one of the co-founders of Instagram and, more recently, the co-founder of personalized news app Artifact (which TechCrunch corporate parent Yahoo recently acquired), is joining Anthropic as the…

Anthropic hires Instagram co-founder as head of product

Seven orgs so far have signed on to standardize the way data is collected and shared.

Venture orgs form alliance to standardize data collection

Alkira has raised $100M for its “network infrastructure as a service,” which lets users virtualize and orchestrate hybrid cloud assets, and manage them. 

Alkira connects with $100M for a solution that connects your clouds

Charging has long been the Achilles’ heel of electric vehicles. One startup thinks it has a better way for apartment dwelling EV drivers to charge overnight.

Orange Charger thinks a $750 outlet will solve EV charging for apartment dwellers

So did investors laugh them out of the room when they explained how they wanted to replace Quickbooks? Kind of.

Embedded accounting startup Layer secures $2.3M toward goal of replacing QuickBooks

While an increasing number of companies are investing in AI, many are struggling to get AI-powered projects into production — much less delivering meaningful ROI. The challenges are many. But…

Weka raises $140M as the AI boom bolsters data platforms