Google ICE Data Sharing: EFF Demands California and New York Investigate Secret User Surveillance

Key Takeaways

• EFF claims Google has been secretly handing user data to law enforcement without required notifications
• A Cornell PhD student discovered DHS subpoenaed his Gmail after he'd already fled the country
• Google allegedly skips user notifications to 'save time' when complying with government demands
• The complaints target both California and New York attorneys general
• This could affect billions of users who rely on Google's privacy promises

Here's the thing about privacy policies: we all scroll past them. We assume the big tech companies are at least following their own rules. But according to the Electronic Frontier Foundation, Google's been breaking a promise it made to billions of users for nearly a decade.

The digital rights group just dropped complaints with the attorneys general of California and New York, asking them to investigate Google for deceptive trade practices. The accusation? Google says it'll notify you before handing your data to law enforcement. But apparently, they've been skipping that part.

The Case That Sparked It All

This whole thing centers on Amandla Thomas-Johnson, a PhD candidate at Cornell University. Last May, he found out something pretty alarming: the Department of Homeland Security had subpoenaed his personal email. The twist? He learned about it after Google had already handed over his information.

Thomas-Johnson had already left the United States by that point. He'd been involved in pro-Palestine activism on campus, and with the Trump administration actively targeting student activists, he wasn't taking chances. Other students like Mahmoud Khalil, Mohsen Mahdawi, and Rümeysa Öztürk had already been detained or faced deportation proceedings.

“This is the big question — whether they were using our [Cornell] emails to track us as well.”

— Amandla Thomas-Johnson, speaking to The Cornell Daily Sun

And that's a scary thought, right? If DHS went after his personal Gmail, did they also go after his university email? When Thomas-Johnson asked Cornell about it, he got radio silence. No response at all.

What Google Says vs. What EFF Claims

Google's response to this has been pretty standard corporate speak. A spokesperson told The Cornell Daily Sun that their processes are "designed to protect users' privacy while meeting our legal obligations." They claimed to review all legal demands and push back against overbroad requests.

They also pointed out that Thomas-Johnson's subpoena only requested basic subscriber information, not the actual contents of his emails. So addresses, phone numbers, connection records. Not the messages themselves.

But here's where the EFF's complaint gets interesting. They say they've learned that Google sometimes sends data over without notifying users "in order to save time and avoid delay with complying with a government demand." In other words, Google's making a business decision to skip the notification step. That's a very different story than what their privacy policy suggests.

Why This Matters Beyond One Student

The EFF isn't treating this as a one-off mistake. They're calling it a "hidden but systemic practice" that Google has "likely violated numerous other times over the years." If that's true, we're not talking about one PhD student getting caught up in immigration enforcement. We're talking about a pattern affecting potentially thousands of people who never knew their data was handed over.

Think about what you have in your Gmail. Work conversations. Medical appointments. Political discussions. Financial information. Family stuff. Most of us treat email like it's private, even though we probably shouldn't. But we definitely expect to know if the government comes knocking.

The Political Context You Can't Ignore

This isn't happening in a vacuum. The targeting of student activists has been ramping up dramatically. Thomas-Johnson specifically mentioned fearing deportation before he left the country, and several other students at various universities have faced serious consequences for their activism.

The EFF's complaint doesn't just focus on immigration enforcement, though. They're making a broader consumer protection argument. Google made a promise. They put it in writing. And according to the EFF, they've been breaking that promise systematically to make their own lives easier when dealing with government requests.

What Happens Next

So what can California and New York actually do about this? Both states have strong consumer protection laws, and their attorneys general have gone after tech companies before for deceptive practices. If they take up the case, Google could face significant penalties. More importantly, they might be forced to actually follow their own policies.

• California has some of the strongest consumer privacy laws in the country
• New York's AG has been aggressive about tech company practices
• Both states could launch formal investigations
• Potential outcomes include fines, injunctions, or required policy changes

Google hasn't issued a detailed response to the EFF's complaint yet. Their previous statements have emphasized that they follow the law and push back on overbroad requests. But "we push back sometimes" isn't the same as "we always notify users first," which is what their privacy policy supposedly promises.

What This Means For You

Look, I'm not going to tell you to delete your Gmail. That's probably not practical for most people. But this is a good reminder that "we'll notify you" doesn't mean "we'll protect you." Even if Google tells you that law enforcement accessed your data, that notification might come after the fact. Maybe way after.

The bigger issue here is trust. Google's entire business model depends on people trusting them with enormous amounts of personal information. If they're making exceptions to their privacy policies when it's convenient, that trust erodes fast. And once it's gone, it's really hard to get back.

This story is still developing. The attorneys general haven't announced whether they'll take up the investigation, and Google will almost certainly fight back if they do. But the EFF has put this on the record, and the questions they're raising aren't going away anytime soon.