Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Google Businesses

Google Exec's Internal Email On Data Leak Policy Rattles Employees (buzzfeednews.com) 124

With employees organizing sit-ins over retaliation and continuing to agitate for change, Google is locking down internal communications. From a report: Google's top legal executive Kent Walker sent an all-staff email on Thursday informing employees that accessing documents classified as "need to know" without permission could result in termination, sources inside the company tell BuzzFeed News. After BuzzFeed News contacted Google about the email, Walker sent an update on Tuesday in the company's daily newsletter, clarifying that employees were typically only terminated when intentional violations resulted in data leaks, risks to user privacy, or harm to co-workers.

The Thursday email, titled "An important reminder on data classifications," referenced changes to Google's data security policy that were updated in October. Although the policy has been in place since 2007, and updates are visible internally, employees weren't notified by email at the time. The timing of the email announcement rattled employees who've been involved with organizing within the company's ranks and who told BuzzFeed News they saw it as a blow to internal accountability mechanisms. These employees said the "need to know" language in the data security policy leaves which particular documents are considered "need to know" up to Google's interpretation; "need to know" documents aren't necessarily labeled as such, and the punishment for accessing such documents without permission can vary, but include termination.

This discussion has been archived. No new comments can be posted.

Google Exec's Internal Email On Data Leak Policy Rattles Employees

Comments Filter:
  • normal (Score:5, Insightful)

    by iggymanz ( 596061 ) on Tuesday May 14, 2019 @02:38PM (#58592164)

    bypassing access restrictions to information is termination offence in most corporations. also can get you imprisoned if you do that on systems belonging to military, police, etc.

    Why is this news and why wouldn't google have such a rule since inception?

    • Yep, this is just more "faux news".

      The Email Subject even says "reminder" in it. This is standard language pretty much anywhere, but OMG its GOOGLE!!!!

    • Re:normal (Score:4, Insightful)

      by laxguy ( 1179231 ) on Tuesday May 14, 2019 @02:41PM (#58592190)
      even the summary says that the policy has been in place since 2007 -- its just more whiny brats at Google trying to get themselves in the news (read: fired)
    • by dysmal ( 3361085 )

      Exactly.

      If they don't like what their company is doing, then leave.

      They're not union so it's not like they have any say in the direction of the company. They're not indentured servants and can leave at any time.

    • Re:normal (Score:5, Interesting)

      by Anubis IV ( 1279820 ) on Tuesday May 14, 2019 @03:49PM (#58592828)

      Why is this news and why wouldn't google have such a rule since inception?

      A policy against leaking need-to-know documents is fine, but what makes this interesting is the following from the summary:

      "need to know" documents aren't necessarily labeled as such

      In most jurisdictions, there's something akin to a "vagueness doctrine" that prevents people from being harmed by vaguely worded laws. After all, if we write rules that more or less say that what's against the rules is whatever an authority figure says is against the rules, why even bother with rules at all? They're utterly meaningless at that point.

      In the case of Google, if they're saying that they can fire you for talking about need-to-know documents, but then they provide you with no indication of which documents meet that classification, what the rule actually amounts to is, "You can't talk about the details or existence of any document, not even to acknowledge that a product or service we've already publicly launched even exists, since we can claim that anything at all you've seen here that is written in a document somewhere is need-to-know and can then use it as a pretense to fire you." Of course, they might have a hard time arguing the validity of that rule in court, but how many people are actually willing to get into a protracted wrongful termination case against a megacorporation like Google in the first place?

      • Well, somebody at Google shurely must have read Kafka...

        In the case of Google, if they're saying that they can fire you for talking about need-to-know documents, but then they provide you with no indication of which documents meet that classification, what the rule actually amounts to is, "You can't talk about the details or existence of any document, not even to acknowledge that a product or service we've already publicly launched even exists, since we can claim that anything at all you've seen here that is written in a document somewhere is need-to-know and can then use it as a pretense to fire you."

        It's characteristic of this judicial system that a man is condemned not only when he's innocent but also in ignorance.
        - Franz Kafka, The Trial

        how many people are actually willing to get into a protracted wrongful termination case against a megacorporation like Google in the first place?

        One must lie low, no matter how much it went against the grain, and try to understand that this great organization remained, so to speak, in a state of delicate balance, and that if someone took it upon himself to alter the dispositions of things around him, he ran the risk of losing his footing and f

      • by reanjr ( 588767 )

        They are at-will employees. You can fire them for any reason you want, pretty much. Perhaps some have employment contracts at the senior level, but the majority of the peons can be fired for wearing a Yankees cap or giving side-eye.

        • by realxmp ( 518717 )
          Only in certain US states, Google has a substantial workforce in Europe where an employment contract actually is a proper contract with two-way obligations. Unless you make it reasonably obvious that a document is restricted this has "unfair dismissal" written all over it.
          • Hmm, what's the "2-way" part of the obligations? I certainly value being able to quit without having to justify it to somebody.
      • That's the idea, to create a climate of fear. You never know when you're breaking policy. Policy may change at any time and it is not necessary to notify you. This was a hallmark of the far left regimes of the 20th century and it's horrifying it's making a comeback.
      • doesn't matter, leaking proprietary information can get you fired at most places, and the courts will not side with you.

        • If the information is public, it isn't proprietary, but that doesn't mean they can't label it as need-to-know and fire you for mentioning it anyway, which is absurd.

    • by elrous0 ( 869638 )

      Why is this news and why wouldn't google have such a rule since inception?

      Because, apparently, some deluded Google employees think Google is their daddy, not their employer.

    • by flink ( 18449 )

      bypassing access restrictions to information is termination offence in most corporations. also can get you imprisoned if you do that on systems belonging to military, police, etc.

      Why is this news and why wouldn't google have such a rule since inception?

      Yeah - having worked in both the defense and medical fields, getting fired would be the least of my worries for improper access or leaks. Getting fired rather than jail time is a minor consequence in comparison. If you have knowledge of illegal activity, then that's different of course.

      And if you have a strong moral objection to what you are seeing or have access to despite it being legal and simply feel compelled to disclose it, then my hat is off to you. But getting fired is the natural consequence of

    • by quall ( 1441799 )

      Exactly. Which company lets you distribute internal documents or communications? It makes no sense why this is even an issue, or why people are complaining. This is standard stuff.

  • by Snotnose ( 212196 ) on Tuesday May 14, 2019 @02:38PM (#58592168)
    Mid 90's at an all hands meeting at Qualcomm. VP gently reminded us to take special care of all documents stamped "Qualcomm Confidential". Don't take them home, don't throw them out (shred them instead), etc etc etc. I raised my hand and pointed out everything was stamped Qualcomm Confidential, even the weekly cafeteria menus. He said he'd look into it, nothing changed.
    • by guruevi ( 827432 )

      Well, then the policy applies. Unless it's going to cost them extra they're not going to change it and it's cheaper to just apply it to everything than having a legal team vet every document.

      • by Anonymous Coward

        Stamping everything with confidential weakens (yes legally) that term. Because it means that in most cases the company is lying about a document being confidential.

        This is the same argument against those email signatures with that legal bullshit below it. For example claiming copyright on an email (on most cases business communication can not be copyrighted) is very often a lie, then when you actually send an email with copyrightable content, you argument becomes very weak.

        • It also encourages weak security practices. Handling confidential material brings extra annoyances, so if even the regular everyday stuff is marked confidential, people will soon start ignoring some of the rules in order to be able to get on with their work. For that reason and the one you cite, one place I worked at (where security was necessarily taken extremely seriously) would regularly issue warnings for applying too strict a classification to documents, if that happened too often.
      • by Cederic ( 9623 )

        Internal company policy can't be enforced when everybody into the company (from the exec down) demonstrably acts against it. E.g. you can't be fired for using company email for personal purposes if half the traffic.

        Well, in the UK anyway. Consult an employment lawyer for details.

    • My current employer sends out a regular newsletter/magazine that is usually stamped "Company Confidential". While that would be nothing special, they send it to my home address (WTF?!). If I go by the letter of the employee manual I would need to bring it to work before ever having it leave my side, and properly dispose of it in the secure shred bin.

      My boss currently receives it at his OLD address where his mother-in-law now resides, so she periodically accidentally opens it up and is confused by it all.

  • ... to be circling the wagons? What is google expecting?
  • If you don't like it, get a better job.
  • by Anonymous Coward on Tuesday May 14, 2019 @02:55PM (#58592324)

    Can we please STOP using BUZZFEED as a news source??

  • The bigger issue is why wasn't this rule in place decades ago? For a company that as much information on members of the public as Google does, it really bothers me that this wasn't the case years ago.

  • 1. reach a page/email that has a "need to know" link.
    2. Right click that link and copy the address.
    3. log into TOR, get a free email account, and phish your boss with the link
    4. wait for your boss to be fired
    5. if someone else is promoted instead of you, go back to step 3.

    • 1. reach a page/email that has a "need to know" link.
      2. Right click that link and copy the address.
      3. log into TOR, get a free email account, and phish your boss with the link
      4. wait for your boss to be fired
      5. if someone else is promoted instead of you, go back to step 3.

      That wouldn't be a promotion because becoming a manager at Google is not a promotion. It's an additional load of responsibilities with no additional pay or title. (I know, because I am a manager at Google.)

      Also, if you're the type of person who would pull the above trick, you would almost certainly not be a very successful Google manager, which you succeed at by helping your employees to grow their own skills and careers, and to get promoted. As a result, in addition to having more work and no extra pa

  • Google was a company that excited me. It was different than the rest! I felt like they were one of 'us.'

    Imagine the passion you might have found, if you were a part of it, from an early to mid portion of Google's phases.

    For reasons described and pontificated upon in open and well read venues, the dream was sold.

    And the thing is, much creative and trendsetting work is done by people with real passion for the work, ones less motivated by a paycheck than what amounts to idealism.

    They see the things
  • So much for "Do no harm".

  • The timing of the email announcement rattled employees who've been involved with organizing within the company's ranks and who told BuzzFeed News they saw it as a blow to internal accountability mechanisms.

    As it was meant to be, dumbasses. That was very much a shot across the bow. Google employees seem to think their employer is some sort of participatory funfest. It's not. It's an American for-profit corporation, one of the most autocratic human organizations on the planet outside of North Korea and the Vatican. Shit, it's debatable which is more autocratic, the corporation or North Korea. In North Korea, the powers that be can kill you and your family. In the American corporation, they control your h

"Someone's been mean to you! Tell me who it is, so I can punch him tastefully." -- Ralph Bakshi's Mighty Mouse

Working...