Security News > 2020 > May > Stop tracking me, Google: Austrian citizen files GDPR legal complaint over Android Advertising ID

Privacy pressure group Noyb has filed a legal complaint against Google on behalf of an Austrian citizen, claiming the Android Advertising ID on every Android device is "Personal data" as defined by the EU's GDPR and that this data is illegally processed.

The complaint against Google, which was filed with the Austrian Data Protection Authority, is based on the claim that Google's Android operating system generates the advertising ID without user choice as required by GDPR. "In essence, you buy a new Android phone, but by adding a tracking ID they ship you a tracking device," said Noyb lawyer Stefano Rossetti.

According to Google: "The advertising ID is a unique, user-resettable ID for advertising, provided by Google Play services. It gives users better controls and provides developers with a simple, standard system to continue to monetize their apps. It enables users to reset their identifier or opt out of personalized ads within Google Play apps." The opt-out is in Google settings but when you do opt out, it does not delete the advertising ID. It appears that the effectiveness of the opt-out is in part down to app developers.

Google responded to the request by stating that "In the case of non-account holders, Google does not have the means to verify the identity of data subjects from an Advertising ID and therefore, we cannot take specific action on the basis of the content contained in your email" and that "You may immediately cease the processing of personal data related to your Advertising ID by resetting your Advertising ID.".

The complaint requests that Google is ordered to "Permanently delete the advertising ID", provide access to the data collected, and be fined based on various GDPR breaches.

News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/05/13/google_android_gdpr_complaint/