Updates
Google and CEO Sundar Pichai Under Fire for Sending Americans’ Data to Foreign Adversaries in New National Security Complaint
January 16, 2025

U.S. Federal Trade Commission urged to investigate Google’s RTB data in first ever complaint under new national security data law
Google sends enormous quantities of sensitive data about Americans to China and other foreign adversaries, according to evidence in a major complaint filed today at the FTC by EPIC and Enforce. This is the first ever complaint under the new Protecting Americans’ Data from Foreign Adversaries Act.
The complaint targets a major part of Google’s business: Google’s Real-Time Bidding (RTB) system which dominates online advertising and operates on 33.7 million websites, 92% of Android apps, and 77% of iOS apps. Much of Google’s $237.9 billion advertising revenue is RTB.
Today’s complaint reveals that Google has known for at least a decade that its RTB technology broadcasts sensitive data without any security, according to internal Google discussions highlighted in today’s complaint.
The complaint cites internal Google communications showing that Google CEO, Sundar Pichai, rejected or failed to act upon internal calls to reform the company’s dangerous RTB system in 2021. Instead, Google continued to expose sensitive American defense and industry personnel, and their institutions, to blackmail and compromise, in addition to causing grave privacy harm to consumers.
The complaint highlights Enforce’s 2023 report “America’s Hidden Security Crisis,” which revealed how extraordinarily sensitive Google RTB data about active U.S. military personnel, national security leaders, and even judges, are available for purchase on the commercial data market. The data include information about people’s health conditions, debt, gambling, sexuality, politics, and gun ownership. Even Google’s so called “non personalized” data contains dangerous data. The FTC previously relied on this report when it took action against Mobilewalla, a data company. EPIC and Enforce now urge the FTC to urgently act to protect Americans against Google, too.
“Google has time and again proven that it cannot be trusted to protect our data. The FTC must act to rein in Google’s data abuses, which expose Americans’ data to foreign adversaries, undermining democracy, and threatening our national security,” said Sara Geoghegan, EPIC Senior Counsel.
Dr Johnny Ryan, Director of Enforce, said “We can now be certain Google knew about the security flaw in its advertising system for at least a decade. Despite this, it continued to vent sensitive data, betraying America and her allies. The FTC must act to end Google’s security crisis.”
The complaint alleges that Google RTB violates the new Protecting Americans’ Data from Foreign Adversaries Act of 2024 (PADFAA). PADFAA prohibits any company that earns revenue by providing access to data from transferring data of U.S. individuals to a foreign adversary country, or to any entity controlled by North Korea, China, Russia, or Iran.
###
About EPIC
EPIC (the Electronic Privacy Information Center) is a 501(c)(3) non-profit established in 1994 to protect privacy, freedom of expression, and democratic values in the information age through advocacy, research, and litigation. EPIC has long called on the FTC to impose data minimization requirements to protect consumers’ privacy. EPIC has also backed strict prohibitions on the sale of personal information, including in recent comments on the Consumer Financial Protection Bureau’s data brokers rulemaking.
About Enforce
Enforce is a unit of the Irish Council for Civil Liberties (“ICCL”), Ireland’s oldest independent human rights body. ICCL has been at the forefront of every major rights advance in Irish society for over 40 years. Enforce advocates, investigates, and litigates, to defend human rights and civil liberties in the digital domain. Enforce has researched and litigated against the RTB security hazard for several years.

Support Our Work
EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.
Donate