Posted in Poor Quality Assurance, Shoddy Security

City of Los Angeles demands partial refund from Google; LAPD says Google Apps not secure

The City of Los Angeles made a big mistake when it decided to do business with the Monster of Mountain View. Now the city is trying to get a partial refund from Google because some of its departments refuse to use Google’s insecure Apps offering:

Two years after the City of Los Angeles approved a $7.25 million deal to move its e-mail and productivity infrastructure to Google Apps, the migration has still not been completed because the Los Angeles Police Department and other agencies are unsatisfied with Google’s security related to the handling of criminal history data.

Los Angeles officials originally expected to roll Google Apps out to its 30,000 users by June 2010, in partnership with systems integration contractor CSC. But that number has been reduced to about 17,000 employees, largely because of security objections raised by the LAPD and other safety-related departments. Advocacy group Consumer Watchdog opposed the deal, and this week released a letter LA officials sent to CSC in August, which states “The City is in receipt of your letter dated May 13, 2011, wherein CSC indicates that it is unable to meet the security requirements of the City and the Los Angeles Police Department (LAPD) for all data and information, pursuant to U.S. DOJ Criminal Justice Information Systems (CJIS) policy requirements.”

Google has a poor reputation when it comes to privacy and security. That’s because Google’s business model is built on collecting as much user data as possible and monetizing it. Google’s response to security problems has been to collect even more personal information; these days, Gmail users are asked to associate their mobile phone numbers with their Google accounts, all in the name of improved security.

Of course, if a person who uses only GoogleTech loses their Android phone, their email, contacts, web history, and so much more could all be compromised simultaneously. That’s the danger of trusting one company with your data.