Top Google Scientist Says EU Data Measures Pose Privacy Risk for Users

Why It Matters

The dispute highlights the tension between competition policy and data privacy, potentially reshaping how big tech shares user‑derived data in Europe. A fine of up to $80 billion would be one of the largest antitrust penalties, underscoring the stakes for Google and its rivals.

Key Takeaways

• Google's AI red team re‑identified anonymised search data in under two hours.
• EU Commission proposes sharing search ranking, query, click, view data with rivals.
• Potential fine could reach 10% of Google’s revenue—about $80 billion.
• Google plans to work with EC to create stronger anonymisation guardrails.
• Decision due by July 27; non‑compliance risks Digital Markets Act penalties.

Pulse Analysis

The European Commission’s latest push under the Digital Markets Act aims to level the playing field by forcing Google to grant rival search engines access to its rich trove of ranking, query, click and view data. Proponents argue that opening this data will spur competition, foster innovation, and give consumers more choice in a market long dominated by Google’s search monopoly. However, the proposal also raises complex privacy questions, as the data, even when anonymised, contains granular user behaviour that could be reverse‑engineered.

Google’s internal AI red team, a group of security experts that simulate sophisticated attacks, demonstrated that the current anonymisation approach can be breached in under two hours. This finding underscores the growing capability of AI tools to re‑identify individuals from supposedly de‑identified datasets, a risk that regulators must address with robust technical safeguards. The scientist’s warning signals that any data‑sharing framework must incorporate advanced differential privacy techniques and continuous monitoring to prevent privacy harms while still delivering the intended competitive benefits.

The stakes are high for both sides. If the EU finalises its rules by July 27 and Google fails to comply, the commission could levy a fine of up to 10% of the company’s annual revenue—estimated at about $80 billion—making it one of the most severe antitrust penalties ever imposed. For Google, the outcome will shape its data‑sharing strategy and influence how it balances regulatory demands with user‑trust considerations. For the broader tech ecosystem, the decision will set a precedent for how privacy and competition intersect in the age of AI‑driven data analytics.