Category Archives: Public Policy Blog

Google’s views on government, policy and politics

Net Neutrality Day of Action: Help preserve the open internet

Editor's note:Today is the Net Neutrality Day of Action, and we’re sending this email to Take Action, our community focused on issues that are important to the future of the internet. We wanted to share it more broadly so everyone can see how to get involved.

The net neutrality rules that protect the open internet are in danger of being dismantled.

Internet companies, innovative startups, and millions of internet users depend on these common-sense protections that prevent blocking or throttling of internet traffic, segmenting the internet into paid fast lanes and slow lanes, and other discriminatory practices. Thanks in part to net neutrality, the open internet has grown to become an unrivaled source of choice, competition, innovation, free expression, and opportunity. And it should stay that way.

Today’s open internet ensures that both new and established services, whether offered by an established internet company like Google, a broadband provider, or a small startup, have the same ability to reach users on an equal playing field.

It’s an important chapter in this debate, and we hope you’ll make your voice heard.

Tell everyone that you want to keep the Internet free and open.

Google and many others are joining together to call on the FCC to preserve the open internet, and we encourage you to act too!

Together, we can make our voices heard and we can make a difference.

To find out more, including how to share your views with the FCC, visit https://netneutrality.internetassociation.org/action/.

Responding to the “Campaign for Accountability” report on academic research

Today the Campaign for Accountability released a report about our funding of academic research.   It claims to list hundreds of papers we’ve “in some way funded.”  The report is highly misleading. For example, the report attributes to Google any work that was supported by any organization to which we belong or have ever donated (such as CCIA).

Nevertheless, we’re proud to maintain strong relations with academics, universities and research institutes, in our own name, so we wanted to take a few moments to respond to the report.

We run many research programs that provide funding and resources to the external research community. This helps public and private institutions pursue research on important topics in computer science, technology, and a wide range of public policy and legal issues. Our support for the principles underlying an open internet is shared by many academics and institutions who have a long history of undertaking research on these topics—across important areas like copyright, patents, and free expression. We provide support to help them undertake further research, and to raise awareness of their ideas.

These programs (and those run by other companies) augment the government and university-funded research that is the backbone of academic discourse in the United States.

We also run policy fellowship programs. Most other companies do this too; the difference with Google is that we list ours publicly on our policy website.

Our funding is guided by these principles:

  • Disclosure requirements: When we provide financial support, we expect and require grantees to properly disclose our funding. If there are ever omissions or unclear disclosures, we work to tighten our requirements.

  • Independence: We value academic independence and integrity. We offer grants for discrete pieces of research, not to shape academics’ subsequent scholarship. The researchers and institutions to whom we award research grants will often publish research with which we disagree. In fact, many of the academics listed by the Campaign for Accountability have criticized Google and our policy positions heavily on a variety of topics. Here are just three of the academics on their list, opposing and arguing against us on antitrust, net neutrality and privacy.

The irony of discussing disclosures and transparency with the “Campaign for Accountability” is that this group consistently refuses to name its corporate funders.  And those backers won’t ‘fess up either.  The one funder the world does know about is Oracle, which is running a well-documented lobbying campaign against us. In its own name and through proxies, Oracle has funded many hundreds of articles, research papers, symposia and reports. Oracle is not alone—you can easily find similar activity by companies and organizations funded by our competitors, like AT&T, the MPAA, ICOMP, FairSearch and dozens more; including hundreds of pieces directly targeting Google.

We’re proud of our programs and their integrity. The “Campaign for Accountability” and its funders are, clearly, not proud of theirs.

Responding to the “Campaign for Accountability” report on academic research

Today the Campaign for Accountability released a report about our funding of academic research.   It claims to list hundreds of papers we’ve “in some way funded.”  The report is highly misleading. For example, the report attributes to Google any work that was supported by any organization to which we belong or have ever donated (such as CCIA).

Nevertheless, we’re proud to maintain strong relations with academics, universities and research institutes, in our own name, so we wanted to take a few moments to respond to the report.

We run many research programs that provide funding and resources to the external research community. This helps public and private institutions pursue research on important topics in computer science, technology, and a wide range of public policy and legal issues. Our support for the principles underlying an open internet is shared by many academics and institutions who have a long history of undertaking research on these topics—across important areas like copyright, patents, and free expression. We provide support to help them undertake further research, and to raise awareness of their ideas.

These programs (and those run by other companies) augment the government and university-funded research that is the backbone of academic discourse in the United States.

We also run policy fellowship programs. Most other companies do this too; the difference with Google is that we list ours publicly on our policy website.

Our funding is guided by these principles:

  • Disclosure requirements:When we provide financial support, we expect and require grantees to properly disclose our funding. If there are ever omissions or unclear disclosures, we work to tighten our requirements.

  • Independence:We value academic independence and integrity. We offer grants for discrete pieces of research, not to shape academics’ subsequent scholarship. The researchers and institutions to whom we award research grants will often publish research with which we disagree. In fact, many of the academics listed by the Campaign for Accountability have criticized Google and our policy positions heavily on a variety of topics. Here are just three of the academics on their list, opposing and arguing against us on antitrust, net neutrality and privacy.

The irony of discussing disclosures and transparency with the “Campaign for Accountability” is that this group consistently refuses to name its corporate funders.  And those backers won’t ‘fess up either.  The one funder the world does know about is Oracle, which is running a well-documented lobbying campaign against us. In its own name and through proxies, Oracle has funded many hundreds of articles, research papers, symposia and reports. Oracle is not alone—you can easily find similar activity by companies and organizations funded by our competitors, like AT&T, the MPAA, ICOMP, FairSearch and dozens more; including hundreds of pieces directly targeting Google.

We’re proud of our programs and their integrity. The “Campaign for Accountability” and its funders are, clearly, not proud of theirs.

The European Commission decision on online shopping: the other side of the story

When you shop online, you want to find the products you’re looking for quickly and easily. And advertisers want to promote those same products. That's why Google shows shopping ads, connecting our users with thousands of advertisers, large and small, in ways that are useful for both.

We believe the European Commission’s online shopping decision underestimates the value of those kinds of fast and easy connections. While some comparison shopping sites naturally want Google to show them more prominently, our data shows that people usually prefer links that take them directly to the products they want, not to websites where they have to repeat their searches.

We think our current shopping results are useful and are a much-improved version of the text-only ads we showed a decade ago. Showing ads that include pictures, ratings, and prices benefits us, our advertisers, and most of all, our users. And we show them only when your feedback tells us they are relevant. Thousands of European merchants use these ads to compete with larger companies like Amazon and eBay.

Google shopping screengrab

When the Commission asks why some comparison websites have not done as well as others, we think it should consider the many sites that have grown in this period--including platforms like Amazon and eBay. With its comparison tools, reviews, millions of retailers, and vast range of products from sneakers to groceries, Amazon is a formidable competitor and has become the first port of call for product searches.  And as Amazon has grown, it’s natural that some comparison services have proven less popular than others. We compete with Amazon and other sites for shopping-related searches by showing ever more useful product information.

When you use Google to search for products, we try to give you what you’re looking for. Our ability to do that well isn’t favoring ourselves, or any particular site or seller--it’s the result of hard work and constant innovation, based on user feedback.

Given the evidence, we respectfully disagree with the conclusions announced today. We will review the Commission’s decision in detail as we consider an appeal, and we look forward to continuing to make our case.

The European Commission decision on online shopping: the other side of the story

When you shop online, you want to find the products you’re looking for quickly and easily. And advertisers want to promote those same products. That's why Google shows shopping ads, connecting our users with thousands of advertisers, large and small, in ways that are useful for both.

We believe the European Commission’s online shopping decision underestimates the value of those kinds of fast and easy connections. While some comparison shopping sites naturally want Google to show them more prominently, our data shows that people usually prefer links that take them directly to the products they want, not to websites where they have to repeat their searches.

We think our current shopping results are useful and are a much-improved version of the text-only ads we showed a decade ago. Showing ads that include pictures, ratings, and prices benefits us, our advertisers, and most of all, our users. And we show them only when your feedback tells us they are relevant. Thousands of European merchants use these ads to compete with larger companies like Amazon and eBay.

Google shopping screengrab

When the Commission asks why some comparison websites have not done as well as others, we think it should consider the many sites that have grown in this period--including platforms like Amazon and eBay. With its comparison tools, reviews, millions of retailers, and vast range of products from sneakers to groceries, Amazon is a formidable competitor and has become the first port of call for product searches.  And as Amazon has grown, it’s natural that some comparison services have proven less popular than others. We compete with Amazon and other sites for shopping-related searches by showing ever more useful product information.

When you use Google to search for products, we try to give you what you’re looking for. Our ability to do that well isn’t favoring ourselves, or any particular site or seller--it’s the result of hard work and constant innovation, based on user feedback.

Given the evidence, we respectfully disagree with the conclusions announced today. We will review the Commission’s decision in detail as we consider an appeal, and we look forward to continuing to make our case.

Digital security and due process: A new legal framework for the cloud era

Editor’s note: This is an abbreviated version of a speech Kent delivered today at The Heritage Foundation in Washington, D.C.

For as long as we’ve had legal systems, prosecutors and police have needed to gather evidence. And for each new advance in communications, law enforcement has adapted. With the advent of the post office, police got warrants to search letters and packages. With the arrival of telephones, police served subpoenas for the call logs of suspects. Digital communications have now gone well beyond the Postal Service and Ma Bell. But the laws that govern evidence-gathering on the internet were written before the Information Revolution, and are now both hindering the flow of information to law enforcement and jeopardizing user privacy as a result.

These rules are due for a fundamental realignment in light of the rapid growth of technology that relies on the cloud, the very real security threats that face people and communities, and the expectations of privacy that internet users have in their communications.

Today, we’re proposing a new framework that allows countries that commit to baseline privacy, human rights, and due process principles to gather evidence more quickly and efficiently. We believe these reforms would not only help law enforcement conduct more effective investigations but also encourage countries to improve and align on privacy and due process standards. Further, reducing the amount of time countries have to wait to gather evidence means would reduce the pressure to pursue more problematic ways of trying to gather data.

Current laws hinder law enforcement and user privacy

The U.S. Electronic Communications Privacy Act (ECPA) governs requests for content from law enforcement. Under ECPA, foreign countries largely have to rely on diplomatic mechanisms such as Mutual Legal Assistance Treaties (MLAT) to obtain content that is held by a company in the United States. The last data we’ve seen suggests that the average wait to receive content through the MLAT process is 10 months, far too long for most criminal cases. While law enforcement waits for this data, crimes could remain unsolved or a trial might happen missing key evidence.

The current legal framework poses a threat to users’ privacy as well. Faced with the extended delays under the MLAT process, some countries are now asserting that their laws apply to companies and individuals outside of their borders. Countries asserting extraterritorial authority potentially put companies in an untenable situation where we risk violating either the law of the requesting country or the law of the country where we are headquartered.

We are also seeing various proposals to require companies to store data within local borders as a means to gain easier access. There are a host of problems with this: small, one-off data centers are easier targets for attackers and jeopardize data security and privacy. Further, requiring businesses to build these data-centers will raise the costs for cloud services, erecting significant barriers for smaller companies.

The legal ambiguity concerning cross-border law enforcement requests has also created complications for law enforcement in the United States. Last year, the Second Circuit Court of Appeals was asked to determine the reach of ECPA search warrants issued under the now out-of-date statute. The Court ruled that under existing law, an ECPA search warrant cannot be used to compel service providers to disclose user data that is stored outside of the U.S. But even those judges agreed that ECPA should be updated by Congress to reflect the new reality of today’s global networks.

Principles for reform

Our proposal to address these challenges for domestic and international law enforcement, for companies, and for users has two core principles:

First, countries that honor baseline principles of privacy, human rights, and due process should be able to make direct requests to service providers for user data that pertains to serious crimes that happen within their borders and users who are within their jurisdiction.  

While the U.S. cannot solve the problem on its own, and many countries have blocking regulations, policy reform in the US is a necessary first step. We’ve been pleased to see serious debate around ways to update digital evidence laws in Washington on this issue.

In May, the U.S. Department of Justice presented legislation that would amend ECPA and  authorize U.S. providers to disclose records and communications content to foreign governments that adhere to baseline due process, human rights, and privacy standards. This legislation would be the critical starting point for the new framework of direct requests.

ECPA should also be updated to address what data is available using an ECPA search warrant in a way that serves broader public policy objectives. Law enforcement requests for digital evidence should be based on the location and nationality of users, not the location of data. A key component of this reform is the International Communications Privacy Act (ICPA), which Google supports. ICPA provides a unique opportunity for Congress to update laws governing digital evidence both for investigations in the U.S. and abroad. While refinements to ICPA may be necessary, we believe the principles upon which ICPA is based are sound.

Second, provided that countries can meet baseline standards and the U.S. amends ECPA, the next step would be for the United States and foreign governments to sign new agreements that could provide an alternative to the MLAT process. The bilateral agreements that could be authorized by the legislation put forward by the Department of Justice provide a promising avenue to improve global privacy standards and create a pathway for foreign governments to obtain digital evidence for investigations.

We’re ready to do our part

We know that this will be an involved process. It’ll require action here in Washington and in capitals around the world. However, we can’t accept the complexity of action as a reason for inaction in addressing an important and growing problem.

Our proposal asks for a lot of movement from governments. But we recognize our role as well. Google is ready to work with legislators, regulators, civil society, academics, and other companies to progress these proposals and make sure that we get this right. And I look forward to conversations that we’ll have in Washington, D.C. and beyond in the months to come.

Digital security and due process: A new legal framework for the cloud era

Editor’s note: This is an abbreviated version of a speech Kent delivered today at The Heritage Foundation in Washington, D.C.

For as long as we’ve had legal systems, prosecutors and police have needed to gather evidence. And for each new advance in communications, law enforcement has adapted. With the advent of the post office, police got warrants to search letters and packages. With the arrival of telephones, police served subpoenas for the call logs of suspects. Digital communications have now gone well beyond the Postal Service and Ma Bell. But the laws that govern evidence-gathering on the internet were written before the Information Revolution, and are now both hindering the flow of information to law enforcement and jeopardizing user privacy as a result.

These rules are due for a fundamental realignment in light of the rapid growth of technology that relies on the cloud, the very real security threats that face people and communities, and the expectations of privacy that internet users have in their communications.

Today, we’re proposing a new framework that allows countries that commit to baseline privacy, human rights, and due process principles to gather evidence more quickly and efficiently. We believe these reforms would not only help law enforcement conduct more effective investigations but also encourage countries to improve and align on privacy and due process standards. Further, reducing the amount of time countries have to wait to gather evidence means would reduce the pressure to pursue more problematic ways of trying to gather data.

Current laws hinder law enforcement and user privacy

The U.S. Electronic Communications Privacy Act (ECPA) governs requests for content from law enforcement. Under ECPA, foreign countries largely have to rely on diplomatic mechanisms such as Mutual Legal Assistance Treaties (MLAT) to obtain content that is held by a company in the United States. The last data we’ve seen suggests that the average wait to receive content through the MLAT process is 10 months, far too long for most criminal cases. While law enforcement waits for this data, crimes could remain unsolved or a trial might happen missing key evidence.

The current legal framework poses a threat to users’ privacy as well. Faced with the extended delays under the MLAT process, some countries are now asserting that their laws apply to companies and individuals outside of their borders. Countries asserting extraterritorial authority potentially put companies in an untenable situation where we risk violating either the law of the requesting country or the law of the country where we are headquartered.

We are also seeing various proposals to require companies to store data within local borders as a means to gain easier access. There are a host of problems with this: small, one-off data centers are easier targets for attackers and jeopardize data security and privacy. Further, requiring businesses to build these data-centers will raise the costs for cloud services, erecting significant barriers for smaller companies.

The legal ambiguity concerning cross-border law enforcement requests has also created complications for law enforcement in the United States. Last year, the Second Circuit Court of Appeals was asked to determine the reach of ECPA search warrants issued under the now out-of-date statute. The Court ruled that under existing law, an ECPA search warrant cannot be used to compel service providers to disclose user data that is stored outside of the U.S. But even those judges agreed that ECPA should be updated by Congress to reflect the new reality of today’s global networks.

Principles for reform

Our proposal to address these challenges for domestic and international law enforcement, for companies, and for users has two core principles:

First, countries that honor baseline principles of privacy, human rights, and due process should be able to make direct requests to service providers for user data that pertains to serious crimes that happen within their borders and users who are within their jurisdiction.  

While the U.S. cannot solve the problem on its own, and many countries have blocking regulations, policy reform in the US is a necessary first step. We’ve been pleased to see serious debate around ways to update digital evidence laws in Washington on this issue.

In May, the U.S. Department of Justice presented legislation that would amend ECPA and  authorize U.S. providers to disclose records and communications content to foreign governments that adhere to baseline due process, human rights, and privacy standards. This legislation would be the critical starting point for the new framework of direct requests.

ECPA should also be updated to address what data is available using an ECPA search warrant in a way that serves broader public policy objectives. Law enforcement requests for digital evidence should be based on the location and nationality of users, not the location of data. A key component of this reform is the International Communications Privacy Act (ICPA), which Google supports. ICPA provides a unique opportunity for Congress to update laws governing digital evidence both for investigations in the U.S. and abroad. While refinements to ICPA may be necessary, we believe the principles upon which ICPA is based are sound.

Second, provided that countries can meet baseline standards and the U.S. amends ECPA, the next step would be for the United States and foreign governments to sign new agreements that could provide an alternative to the MLAT process. The bilateral agreements that could be authorized by the legislation put forward by the Department of Justice provide a promising avenue to improve global privacy standards and create a pathway for foreign governments to obtain digital evidence for investigations.

We’re ready to do our part

We know that this will be an involved process. It’ll require action here in Washington and in capitals around the world. However, we can’t accept the complexity of action as a reason for inaction in addressing an important and growing problem.

Our proposal asks for a lot of movement from governments. But we recognize our role as well. Google is ready to work with legislators, regulators, civil society, academics, and other companies to progress these proposals and make sure that we get this right. And I look forward to conversations that we’ll have in Washington, D.C. and beyond in the months to come.

Digital security and due process: A new legal framework for the cloud era

Editor’s note: This is an abbreviated version of a speech Kent delivered today at The Heritage Foundation in Washington, D.C.

For as long as we’ve had legal systems, prosecutors and police have needed to gather evidence. And for each new advance in communications, law enforcement has adapted. With the advent of the post office, police got warrants to search letters and packages. With the arrival of telephones, police served subpoenas for the call logs of suspects. Digital communications have now gone well beyond the Postal Service and Ma Bell. But the laws that govern evidence-gathering on the internet were written before the Information Revolution, and are now both hindering the flow of information to law enforcement and jeopardizing user privacy as a result.

These rules are due for a fundamental realignment in light of the rapid growth of technology that relies on the cloud, the very real security threats that face people and communities, and the expectations of privacy that internet users have in their communications.

Today, we’re proposing a new framework that allows countries that commit to baseline privacy, human rights, and due process principles to gather evidence more quickly and efficiently. We believe these reforms would not only help law enforcement conduct more effective investigations but also encourage countries to improve and align on privacy and due process standards. Further, reducing the amount of time countries have to wait to gather evidence means would reduce the pressure to pursue more problematic ways of trying to gather data.

Current laws hinder law enforcement and user privacy

The U.S. Electronic Communications Privacy Act (ECPA) governs requests for content from law enforcement. Under ECPA, foreign countries largely have to rely on diplomatic mechanisms such as Mutual Legal Assistance Treaties (MLAT) to obtain content that is held by a company in the United States. The last data we’ve seen suggests that the average wait to receive content through the MLAT process is 10 months, far too long for most criminal cases. While law enforcement waits for this data, crimes could remain unsolved or a trial might happen missing key evidence.

The current legal framework poses a threat to users’ privacy as well. Faced with the extended delays under the MLAT process, some countries are now asserting that their laws apply to companies and individuals outside of their borders. Countries asserting extraterritorial authority potentially put companies in an untenable situation where we risk violating either the law of the requesting country or the law of the country where we are headquartered.

We are also seeing various proposals to require companies to store data within local borders as a means to gain easier access. There are a host of problems with this: small, one-off data centers are easier targets for attackers and jeopardize data security and privacy. Further, requiring businesses to build these data-centers will raise the costs for cloud services, erecting significant barriers for smaller companies.

The legal ambiguity concerning cross-border law enforcement requests has also created complications for law enforcement in the United States. Last year, the Second Circuit Court of Appeals was asked to determine the reach of ECPA search warrants issued under the now out-of-date statute. The Court ruled that under existing law, an ECPA search warrant cannot be used to compel service providers to disclose user data that is stored outside of the U.S. But even those judges agreed that ECPA should be updated by Congress to reflect the new reality of today’s global networks.

Principles for reform

Our proposal to address these challenges for domestic and international law enforcement, for companies, and for users has two core principles:

First, countries that honor baseline principles of privacy, human rights, and due process should be able to make direct requests to service providers for user data that pertains to serious crimes that happen within their borders and users who are within their jurisdiction.  

While the U.S. cannot solve the problem on its own, and many countries have blocking regulations, policy reform in the US is a necessary first step. We’ve been pleased to see serious debate around ways to update digital evidence laws in Washington on this issue.

In May, the U.S. Department of Justice presented legislation that would amend ECPA and  authorize U.S. providers to disclose records and communications content to foreign governments that adhere to baseline due process, human rights, and privacy standards. This legislation would be the critical starting point for the new framework of direct requests.

ECPA should also be updated to address what data is available using an ECPA search warrant in a way that serves broader public policy objectives. Law enforcement requests for digital evidence should be based on the location and nationality of users, not the location of data. A key component of this reform is the International Communications Privacy Act (ICPA), which Google supports. ICPA provides a unique opportunity for Congress to update laws governing digital evidence both for investigations in the U.S. and abroad. While refinements to ICPA may be necessary, we believe the principles upon which ICPA is based are sound.

Second, provided that countries can meet baseline standards and the U.S. amends ECPA, the next step would be for the United States and foreign governments to sign new agreements that could provide an alternative to the MLAT process. The bilateral agreements that could be authorized by the legislation put forward by the Department of Justice provide a promising avenue to improve global privacy standards and create a pathway for foreign governments to obtain digital evidence for investigations.

We’re ready to do our part

We know that this will be an involved process. It’ll require action here in Washington and in capitals around the world. However, we can’t accept the complexity of action as a reason for inaction in addressing an important and growing problem.

Our proposal asks for a lot of movement from governments. But we recognize our role as well. Google is ready to work with legislators, regulators, civil society, academics, and other companies to progress these proposals and make sure that we get this right. And I look forward to conversations that we’ll have in Washington, D.C. and beyond in the months to come.

An international framework for digital evidence

Today, we’re releasing the latest version of our Transparency Report regarding government requests for user data. In the second half of 2016, we received over 45,000 government requests for user data worldwide. This is the most government requests we’ve received for user data in a six-month period since we released our first transparency report in 2010.

In many ways, this shouldn’t be surprising. As more people use more of our services, and as we offer new ones, it is natural that we are seeing an increase in government requests. For example, Gmail had around 425 million active users in 2012, and more than 1 billion by 2016. And as digital evidence increasingly becomes part of criminal investigations, other companies are seeing similar trends. We of course continue to require appropriate legal process for these requests, resist overbroad requests not narrowly calibrated to legitimate law enforcement requirements, and reform modernization of data surveillance laws.  

Cross-border requests for data continue to account for a substantial portion of overall requests, with over 31,000 in the second half of 2016 coming from outside of the United States.. This volume underscores the need for an improved international framework that meets legitimate law enforcement needs and ensures high standards of due process, privacy and human rights. The Mutual Legal Assistance Treaty (MLAT) process facilitates the production of digital evidence in cross-border investigations (when the crime occurs in one country but data is held by a company in another country). But the MLAT process is often slow and cumbersome: on average, it takes 10 months to process an MLAT request in the United States. That’s a long time for an investigator to wait.

Without better and faster ways to collect cross-border evidence, countries will be tempted to take unilateral actions to deal with a fundamentally multilateral problem. A sustainable framework for handling digital evidence in legitimate cross-border investigations will help avoid a chaotic, conflicting patchwork of data location proposals and ad hoc surveillance measures that may threaten privacy and generate uncertainty, without fundamentally advancing legitimate law enforcement and national security interests.

We believe that governments can develop solutions that appropriately balance the various interests at stake. This includes respecting the legitimate privacy rights of users, wherever they are, as well as the obligations of governments to investigate crimes and protect their residents. The conversation should include a broad group of stakeholders, including not just law enforcement and national security perspectives, but also the voices of citizens, civil society groups and providers of information services that cross national borders.

This discussion will raise difficult questions about the scope of government surveillance powers, the extent of digital jurisdiction, the importance of rapid investigations, and privacy rights in the Internet age—fundamental issues that can’t be adequately addressed by courts using antiquated legal standards or by governments acting in an ad hoc fashion.

We look forward to sharing more thoughts about the legal frameworks that can address some of these challenges in the coming weeks and months. And we look forward to working with relevant stakeholders to craft viable and lasting solutions.  

An international framework for digital evidence

Today, we’re releasing the latest version of our Transparency Report regarding government requests for user data. In the second half of 2016, we received over 45,000 government requests for user data worldwide. This is the most government requests we’ve received for user data in a six-month period since we released our first transparency report in 2010.

In many ways, this shouldn’t be surprising. As more people use more of our services, and as we offer new ones, it is natural that we are seeing an increase in government requests. For example, Gmail had around 425 million active users in 2012, and more than 1 billion by 2016. And as digital evidence increasingly becomes part of criminal investigations, other companies are seeing similar trends. We of course continue to require appropriate legal process for these requests, resist overbroad requests not narrowly calibrated to legitimate law enforcement requirements, and reform modernization of data surveillance laws.  

Cross-border requests for data continue to account for a substantial portion of overall requests, with over 31,000 in the second half of 2016 coming from outside of the United States.. This volume underscores the need for an improved international framework that meets legitimate law enforcement needs and ensures high standards of due process, privacy and human rights. The Mutual Legal Assistance Treaty (MLAT) process facilitates the production of digital evidence in cross-border investigations (when the crime occurs in one country but data is held by a company in another country). But the MLAT process is often slow and cumbersome: on average, it takes 10 months to process an MLAT request in the United States. That’s a long time for an investigator to wait.

Without better and faster ways to collect cross-border evidence, countries will be tempted to take unilateral actions to deal with a fundamentally multilateral problem. A sustainable framework for handling digital evidence in legitimate cross-border investigations will help avoid a chaotic, conflicting patchwork of data location proposals and ad hoc surveillance measures that may threaten privacy and generate uncertainty, without fundamentally advancing legitimate law enforcement and national security interests.

We believe that governments can develop solutions that appropriately balance the various interests at stake. This includes respecting the legitimate privacy rights of users, wherever they are, as well as the obligations of governments to investigate crimes and protect their residents. The conversation should include a broad group of stakeholders, including not just law enforcement and national security perspectives, but also the voices of citizens, civil society groups and providers of information services that cross national borders.

This discussion will raise difficult questions about the scope of government surveillance powers, the extent of digital jurisdiction, the importance of rapid investigations, and privacy rights in the Internet age—fundamental issues that can’t be adequately addressed by courts using antiquated legal standards or by governments acting in an ad hoc fashion.

We look forward to sharing more thoughts about the legal frameworks that can address some of these challenges in the coming weeks and months. And we look forward to working with relevant stakeholders to craft viable and lasting solutions.