60 Minutes talks about the Google Monopoly. Google has more information than anyone about you, about me, about us than any company in history as ever had.
Google Vault is a chilling example. It's an email Privacy issue no one is talking about. Is your company email, Gmail? If email privacy matters to you, you're gonna wanna find out. Here's why: With Google Vault . . . Everything you type into Gmail - even Drafts can be saved.
When I say "Drafts" I'm not just referring to the email's you saved to your Drafts Folder. Every iteration becomes a "draft' or variant of that email and is saved to the Google Vault. To be clear, it's not just the email you click send on. It's everything you type to get the click.
Everything you write is not private Typos, rethink, anger, errors. All of it. Every single keystroke. Who can see? Every Google Vault has at least one Administrator, and it can be a number of people: Your boss, the IT guy or another peer in the company. Essentially the Administrator has access and can search the Vault.
CLICK VIDEO BELOW
Email Privacy: My Google Vault StoryLike millions of businesses, we use Gmail. It’s best in class, with great encryption and spam filtering and search. When it comes to technology and privacy, Google has advanced and secure Cloud infrastructure. Our IT guy a few months ago suggested we upgrade to Google Vault so that we could archive old emails indefinitely--as a business owner, I value the ability to save company data and communications. Lots of archiving systems can do that... But Google Vault doesn’t just save emails, chats, Hangouts, files (PDF, DOCX, and JPG, Microsoft Word, Excel, Powerpoint) Google Earth and connected Gmail products...Recently, I accidentally discovered that with Gmail and the Google Vault turned on--virtually everything an employee had typed, every iteration was saved--sometimes as many as 50 versions of one email!
A Peek Inside Your Not-So-Private EmailLet me show you a stunning screenshot of what I see when I search topic or name in Google Vault:
It looks worse then it sounds.Being a bit of a privacy fanatic, I was compelled to demonstrate the inner workings of the Google Vault to my employees so we created a video demo. We watched as keystrokes were typed while on or connected to the Gmail server were “vaulted”. It was very unsettling to see that even when a "draft" was deleted from an employee's draft folder, every word, mistake etc. stayed in the Google Vault. Each iteration became a time-stamped "draft." Working very much like a keystroke logger. Google puts it this way: “Messages are available in the vault as soon as they are received by Gmail.” If you're getting a bit nervous here, I've included some helpful work-a-rounds at the end of this article, but stay with me for a moment. If you want to see HOW EMPLOYEES REACT TO SEEING THEIR GOOGLE VAULT Click HERE Google Vault is part of what used to be called Google Apps, changed to G-Suite back in September 2016. It’s collection of all Google’s powerful business tools and includes Gmail, Docs, Drive Sheets, and Calendar. G-suite is a Cloud-based enterprise that Google touts as an “All-in-one suite to communicate, store and create.” The Vault and can be added to Google’s basic Gmail for $5.00 per user per month or it’s included in G-suite for $10 per user per month
Who Loves Google Vault?For one - Employers. It’s great for finding and retrieving valuable company information and data, even from closed accounts. The things hidden in drafts can be very revealing. Who else loves it? Lawyers. Everything in the Vault may be “discoverable” - meaning it could be subpoenaed in a lawsuit or criminal investigation. It’s called e-discovery, the process of seeking and finding information in electronic format, in response to legal matters and investigations. Note that many archival systems can and do save company communication for the purpose of litigation. Vault makes this super easy as it uses Google-patented search to access data in email and attachments(!) including Word .docs power point, attached PDF's, Hangouts, chats etc. and . . . everything typed onto a company mail that's connected to the Gmail server.
eDiscoveryThis is the part that really concerns me: The words you type into Gmail are saved—the thoughts you wrote and then deleted or wrote over—those are saved and may be discoverable. Now, truthfully, it would be a rare occurrence for drafts in the Vault to be subject to search, but not beyond the realm of possibility if circumstances were compelling. If they were discoverable would someone be guilty or complicit by virtue of their thoughts?? I don’t know, but I like to think my thoughts are just...well, mine, and subject to change.
UHH, But for How Long?
Incredibly, employers or administrators can set the time period for data to be retained up to 36,500 days! That's 100 years.When an individual employee leaves, an employer can choose to delete the account or “suspend” it. If the account is suspended, the data REMAINS in the Vault, long after you've left that particular workplace.
What do Privacy Experts Say?If the very idea of an employer being able to look at your email seems not right to you, listen to this. I contacted Paul Stephens Director of Policy and Advocacy at The Privacy Rights Clearinghouse. He viewed the Google Vault Video and though he was not aware of the detail of the Vaults functionality he offered this reminder:
"Almost anything an employee does on an office computer can be monitored. Courts often have found that when employees are using an employer's equipment, their expectation of privacy is limited."I also reached out to a woman highly respected in the world of Cyber Security, Dr. Dena Haritos Tsamitis, Director, Information Networking Institute at Carnegie Mellon University for her input and perspective:
"In the past decade, rapid advances in workplace technology have often come at the expense of privacy and security. On one hand, we have enterprise-level software and applications like Google Vault offering incredible opportunities for collaboration and communication. On the other, we have the threat of compromising the privacy of employees.The balance lies in an organization's commitment to understand how these tools work and educate its employees on safe and secure practices.”