https://www.theregister.com/2022/11/17/kochfunded_group_sues_us_state/ [user] [user] Sign in / up The Register(r) -- Biting the hand that feeds IT [magn] [burg] [burg] Topics Security Security All SecurityCyber-crimePatchesResearchCSO (X) Off-Prem Off-Prem All Off-PremEdge + IoTChannelPaaS + IaaSSaaS (X) On-Prem On-Prem All On-PremSystemsStorageNetworksHPCPersonal Tech (X) Software Software All SoftwareAI + MLApplicationsDatabasesDevOpsOSesVirtualization (X) Offbeat Offbeat All OffbeatDebatesColumnistsScienceGeek's GuideBOFHLegalBootnotesSite NewsAbout Us (X) Vendor Voice Vendor Voice Vendor Voice All Vendor VoiceAmazon Web Services (AWS) Business Transformation CofenseGoogle Cloud for StartupsGoogle WorkspaceOutsystemsRapid7 Supermicro (X) Resources Resources Whitepapers Webinars Newsletters [front] Software 36 comment bubble on white Koch-funded group sues US state agency for installing 'spyware' on 1m Android devices 36 comment bubble on white Class-action lawsuit seeks $1 in nominal damages icon Jessica Lyons Hardcastle Thu 17 Nov 2022 // 20:13 UTC # The Massachusetts Department of Public Health conspired with Google to secretly install a COVID-19 tracing app onto more than 1 million Android users' devices without their knowledge and without obtaining warrants, according to a class-action lawsuit filed this week by the New Civil Liberties Alliance. The New Civil Liberties Alliance claims to be a "nonpartisan, nonprofit civil rights group." Its biggest donors include right-wing backers such as the Charles G. Koch Foundation and the Charles Koch Institute. In September 2020, the group represented a Virginian landlord who sued the Centers for Disease Control to allow him to evict tenants during the pandemic. The Massachusetts app, according to the legal complaint, gave the public health department, Google, application developers, and others access to the device owners' media access control addresses, wireless network IP addresses, phone numbers, contacts and emails, thus making these parties privy to the owners' personal information, location and movement. If Android users discovered and deleted the COVID-19 tracer, the state's health agency would reinstall it on their devices, the lawsuit alleges. [front] "In sum, DPH installed spyware that deliberately tracks and records movement and personal contacts onto over a million mobile devices without their owners' permission and awareness," the lawsuit claims [ PDF]. "On knowledge and belief, that spyware still exists on the overwhelming majority of the devices on which it was installed." [front] [front] At least two dozen other states also developed COVID-19 apps using Google APIs, but they used community outreach to encourage residents to voluntarily download the apps and opt-in for contact tracing, the court documents say. Massachusetts, they allege "is the only state to surreptitiously embed the Contact Tracing App on mobile devices that DPH locates within its borders, without obtaining the owners' knowledge or consent." [front] This violates Android device owners' federal privacy and unreasonable search protections as well as the state's computer crime laws, according to the lawsuit, which also names the Massachusetts Department of Public Health Commissioner Margret Cooke as a defendant. "The Massachusetts DPH, like any other government actor, is bound by state and federal constitutional and legal constraints on its conduct," Peggy Little, NCLA senior litigation counsel, said in a statement. "This 'android attack,' deliberately designed to override the constitutional and legal rights of citizens to be free from government intrusions upon their privacy without their consent, reads like dystopian science fiction -- and must be swiftly invalidated by the court." * Germany says nein to Qatari World Cup spyware, err, apps * Apple sued for collecting user data despite opt-outs * Google agrees to $391.5m settlement in privacy lawsuit * COVID-19 contact tracing apps were suggested as saviors. They sometimes delivered Per the legal challenge, the plaintiffs are asking the court to, among other things, stop secretly installing the contract tracing app without device owners' consent, and work with Google to uninstall the app in cases where the owner did not give permission and opt-in to downloading the tracer. They also want the court to declare that the "clandestine installations" of the tracing app violate state and federal protections. The lawsuit seeks to make the health agency pay all costs and attorney fees related to the legal battle, and nominal damages of $1. When asked about the lawsuit, a Massachusetts Department of Public Health spokesperson told The Register that the department hasn't received the lawsuit and doesn't comment on pending litigation. [front] Google did not respond to The Register's request for comment. (r) Get our Tech Resources # Share Similar topics * Google * Legal * Privacy More like these x Similar topics * Google * Legal * Privacy * Spyware Narrower topics * Android * App stores * Chrome * Chromium * cookies * Discrimination * Google AI * Google Cloud Platform * Google Nest * G Suite * Immigration and Nationality Act of 1965 * Kubernetes * Pixel * Privacy Sandbox * Software License * Tavis Ormandy * Telecommunications Act of 1996 Broader topics * Alphabet * Search Engine * Security Similar topics # Share 36 comment bubble on white COMMENTS Similar topics * Google * Legal * Privacy More like these x Similar topics * Google * Legal * Privacy * Spyware Narrower topics * Android * App stores * Chrome * Chromium * cookies * Discrimination * Google AI * Google Cloud Platform * Google Nest * G Suite * Immigration and Nationality Act of 1965 * Kubernetes * Pixel * Privacy Sandbox * Software License * Tavis Ormandy * Telecommunications Act of 1996 Broader topics * Alphabet * Search Engine * Security TIP US OFF Send us news --------------------------------------------------------------------- Other stories you might like What do the US midterm election results mean for a federal privacy law? Analysis Spoiler: it may hinge on California's voting block Personal Tech15 Nov 2022 | 11 Commercial repair shops caught snooping on customer data by canny Canadian research crew Naming no names, but study finds trustworthy techs are hard to find Personal Tech15 Nov 2022 | 66 Russia-based Pushwoosh tricks US Army and others into running its code - for a while Updated Russian data trackers ... what could possibly go wrong? Security15 Nov 2022 | 19 How serverless is transforming graph databases Amazon Neptune expands serverless to deliver instant workload scaling Sponsored Feature [front] Google's resistance to third party Play store payments eases further with US tests Tune in to hear how it works on Spotify, or hook up with choice on Bumble Personal Tech14 Nov 2022 | 2 Republican senators tell FTC to back off data security, surveillance rules And they don't like the states' 'patchwork' privacy laws, either Legal10 Nov 2022 | 24 Security firms hijack New York trees to monitor private workforce Employee management tech raises eyebrows in the Big Apple Security17 Nov 2022 | 54 It would take a 'catastrophic' recession to stop tech spend growth, says IBM boss Tells Economic Club of New York no one he knows is trimming IT budgets Off-Prem18 Nov 2022 | 14 Germany says nein to Qatari World Cup spyware, err, apps Norway, France also sound data privacy alarms Security16 Nov 2022 | 37 Google settles with Uncle Sam over data that vanished during cryptocurrency biz probe Search giant says changes already made since prosecutors showed up with a warrant years ago Personal Tech26 Oct 2022 | 10 Apple sued for collecting user data despite opt-outs Doesn't matter what the data is, they thought they pushed the off switch, argues complaint Legal14 Nov 2022 | 14 Google taps up Softbank solar plants for Dallas datacenter 900MW coming web giant's way ... in 2024 On-Prem2 Nov 2022 | The Register icon Biting the hand that feeds IT About Us* * Contact us * Advertise with us * Who we are Our Websites* * The Next Platform * DevClass * Blocks and Files Your Privacy* * Cookies Policy * Privacy Policy * T's & C's * Do not sell my personal information Situation Publishing Copyright. All rights reserved (c) 1998-2022 no-js