{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"a01305c4-06e9-4113-a4c4-418e4c819740","screeningDate":"2026-10-01T19:45:23.788Z","publicationGate":"published","company":{"id":"3e20dca5-ce3f-4e7e-930c-7aa4753a789d","name":"Google","slug":"google","industry":"Tech Giant"},"policy":{"id":"c287880a-4512-4dc0-a8bd-cdf7d4f33e15","name":"Privacy Policy","type":"privacy","jurisdiction":"Global","sourceUrl":"https://policies.google.com/privacy"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-01T19:45:23.780Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":2,"sha256":"61d74aa5731363bb1caa708128349f2d4096a6b1ebbce23bf55268c71461a29a","capturedAt":"2026-07-24T20:57:08.674Z"},"current":{"version":3,"sha256":"3e68770c74db79945a9864618429780a62729ad217d96163fe55166b24fdc337","capturedAt":"2026-10-01T19:45:23.783Z"}},"assessment":{"summary":"No changes were found between the old and new Google Privacy Policy versions, maintaining existing data collection and user control practices.","overallRisk":"Medium","overallScore":6,"previousPublicChange":{"id":"2f0b054a-9ea4-45fc-bed4-8a5dda769caf","overallRisk":"Medium","overallScore":6,"screeningDate":"2026-07-24T20:57:08.679Z"},"scoreDelta":0,"direction":"unchanged","reasons":[{"icon":"warning","textEn":"Extensive data collection across all Google services.","textIt":"Ampia raccolta di dati su tutti i servizi Google.","deltaScore":0,"evidenceQuote":"We collect information to provide better services to all our users — from figuring out basic stuff like which language you speak, to more complex things like which ads you’ll find most useful, the people who matter most to you online, or wh","evidenceSide":"new","relatedKpi":"kpiDataCollection","anchorStatus":"verified"},{"icon":"warning","textEn":"Broad sharing of personal data with affiliates and trusted businesses.","textIt":"Ampia condivisione di dati personali con affiliati e aziende fidate.","deltaScore":0,"evidenceQuote":"We provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measu","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"},{"icon":"alert","textEn":"Domain administrators have significant access to user accounts.","textIt":"Gli amministratori di dominio hanno accesso significativo agli account utente.","deltaScore":0,"evidenceQuote":"If you’re a student or work for an organization that uses Google services, your domain administrator and resellers who manage your account will have access to your Google Account.","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"}],"keyPoints":[{"textEn":"Google collects extensive personal, activity, device, and location data across its services.","textIt":"Google raccoglie dati estesi su persona, attività, dispositivo e posizione attraverso i suoi servizi.","sentiment":"negative"},{"textEn":"Users have various privacy controls to manage data collection, personalization, and sharing.","textIt":"Gli utenti hanno diversi controlli sulla privacy per gestire la raccolta, la personalizzazione e la condivisione dei dati.","sentiment":"positive"},{"textEn":"Data is used for service provision, improvement, personalization, and security purposes.","textIt":"I dati sono utilizzati per la fornitura, il miglioramento, la personalizzazione e la sicurezza dei servizi.","sentiment":"neutral"},{"textEn":"Information is shared with affiliates, trusted partners, and domain administrators.","textIt":"Le informazioni sono condivise con affiliati, partner fidati e amministratori di dominio.","sentiment":"negative"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses using Google services must ensure their data processing aligns with GDPR, especially concerning data shared with Google and access by domain administrators. No policy changes mean no new compliance burdens.","complianceNoteEn":"GDPR Data Processing"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"No changes mean existing data collection and processing practices continue. Users retain GDPR rights, including access, deletion, and objection to processing, which Google acknowledges.","complianceNoteEn":"GDPR Compliance"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises using Google services must maintain their existing data governance strategies. The consistent policy requires ongoing vigilance regarding cross-border data transfers and local regulations.","complianceNoteEn":"International Regulations"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Global users face the same extensive data collection and processing as before. The policy offers general controls, but specific regional protections vary.","complianceNoteEn":"Global Data Practices"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses relying on Google services must continue to manage data in compliance with US state privacy laws. The unchanged policy means no new operational adjustments are required.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The policy's broad data collection and personalization practices remain unchanged. Users in states with privacy laws like CCPA/CPRA can exercise their rights to know, delete, and opt-out of sales.","complianceNoteEn":"CCPA/CPRA Rights"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 3?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/a01305c4-06e9-4113-a4c4-418e4c819740","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"b32da3f89f66c4076718ad700671bdaab49358ba960455be3753125f8bb65a71"}