The attorney general signaled his interest in the matter in a public filing that indicated the office had retained an outside law firm to assist in an investigation. The document, dated Aug. 21, said the hired lawyers would help probe an unnamed tech company and its “storage of consumer location data, tracking of consumer location, and other consumer tracking through . . . smartphone operating systems, even when consumers turn off 'location services' and take other steps to stop such tracking,” according to the heavily redacted public notice.
The document was dated just over a week after an investigation by the Associated Press found that Google devices and services store time-stamped location data even for users who believed they had turned off that data collection. The AP verified its findings with the help of researchers from Princeton University.
Ryan Anderson, a spokesman for the Arizona attorney general, acknowledged that there have been “recent bombshell reports depicting how the tech industry handles consumer data and what companies are doing with that information,” including the AP story, which “highlighted Google’s apparent tracking of consumer movement even if you opt out of such services.”
He added that Arizona had “been thinking about investigating privacy concerns by tech companies for some time,” including the tracking of consumer location and the gathering of consumer data. He said he couldn't confirm which company it was targeting in its investigation.
Google spokesman Aaron Stein said in a statement that location data “helps us provide useful services when people interact with our products, like locally relevant search results and traffic predictions,” noting that it collects that information in many ways, including through Android devices as well as through search queries.
Google also has said that it offers “clear descriptions of these tools, and robust controls so people can turn them on or off, and delete their histories at any time," according to a statement it provided to the AP in August.
Under state law, Arizona can bring consumer-protection cases against businesses that deceive users about their practices. The state also can seek penalties of up to $10,000 per violation, meaning Google's location privacy practices could result in a sky-high fine for the company.
Arizona’s investigation of Google marks Brnovich’s latest attempt to push tech giants to improve their online privacy practices. In March, the attorney general publicly blasted Facebook for its entanglement with Cambridge Analytica, a political consultancy that improperly accessed the personal data of about 87 million of the site’s users. “Transparent disclosure of, and clear consent to, the collection and sharing of personal data should be the rule, rather than the exception,” Brnovich wrote in his letter to Facebook.
With Google, the new Arizona probe could embolden privacy hawks who would like to see federal regulators open their own investigation. The Federal Trade Commission penalized the company in 2011 for misleading consumers about its data-collection practices, and the agency has the authority to bring fines of its own if companies violate their settlements with the government.
"We fully support the efforts of the state attorneys general to protect consumer privacy and pursue investigations,” said Marc Rotenberg, the leader of the Electronic Privacy Information Center, which asked the FTC to open a probe in August.
A spokesman for the FTC declined to comment.
Other state attorneys general plan to gather later this month at an event convened by the Justice Department that will explore whether social media sites more broadly are “intentionally stifling the free exchange of ideas” online. Arizona, however, is among a large number of states that have not been invited to the gathering, a spokesman for Brnovich said Monday.