Google Cloud brings transparency in government requests for business data

Google Cloud is committed to transparency when governments request access to business customers' data. Today, to continue our Google-wide effort to build trust through transparency, Google published its annual report on User Information Request.

This version of the report represents an important step forward. For the first time, it surpasses the number of government requests Google has received for Google Cloud Platform and G Suite Enterprise Cloud customer data. Last October, Google committed to publishing this information in early 2020, and future transparency reports will continue to include this information.

Let's take a look at some of the data and take from the report before looking at how Google is working to improve your control and visibility into your data.

Transparent reporting to customers

Now that Google has broken the news about government requests for the data it's storing, Google has four initial observations. These observations are based on the total number of government requests for user information (81,785) across all Google services received from July 2019 to December 2019.

First, the number of business-targeted requests (282) represents a very small percentage (0.3%) of the total number of requests Google receives. Second, for requests involving G Suite Enterprise Cloud customers, Google generated data in a small number of cases (152). In each case, Google has reviewed the requests to ensure they are consistent with Google's policies and practices set out below and applicable law. Third, Google did not generate any customer data Google Cloud Platform Enterprise Cloud to meet government requirements. Finally, regarding public sector customers, Google has identified any requests from one national government seeking information about another national government. If Google receives such a request in the future, Google will redirect the government request to the customer and contest the request if necessary. 

Next, Google believes that centralized corporate information will help address questions about how often governments come to Google to request access to corporate customer data.

Advocate for customer control

Breaking down and segmenting Google Cloud Platform and G Suite Enterprise Cloud customer data in transparency reporting is part of Google's broader commitment to increasing customer control over their data in the cloud . Google also supports, and is prepared to litigate when necessary, to protect the interests of Google's business customers.

Google also continues to support Five global principles for governments follow when making requests about business data stored in the cloud:

• Approach businesses directly
• Increase transparency
• Protect customer interests
• Provides a strong security foundation
• Streamline government rules when it comes to manufacturing. Business

In legal terms, in the US Court of Appeals, Google is trying to legally protect customers' rights to know when data is accessed. Google recently filed a reply brief rebutting the government's arguments about secrecy and notification.

Increased technical controls on GCP

Google believes that customers should have the highest level of control over data stored in the cloud. To deliver on that mission, Google has developed industry-leading product features that increase control over your data and provide visibility into when and how your data is accessed. . Some of Google's recent product updates in these areas include:

• External Key Manager, allows customers to encrypt data with encryption keys stored and managed in a third-party key management system running outside of Google.
• Key Access Justifications (alpha for GCE/PD and Big Query) allows clients to be justified each time keys are used to decrypt data and have the right to grant or deny access requests. 

These products provide an unprecedented level of control over data in the cloud, and Google will continue to update them based on customer needs.

Google is committed to building trust through transparency and to help ensure customers control their data through technical and legal means. To learn more about Google's efforts, see Google's whitepaper on “Government requests for customer data: controlling access to your data in Google Cloud.”

Source: Gimasys