“Doodle-4-Google” is so much more than an art contest. Sure, the game, which received 33,000 entries last year, celebrates “the creativity of young people” by having them send in a drawing under the theme “What I’d like to do someday …” But, there’s another component, as well. It also helps Google collect some very personal data on students K through 12. Along with the submission, the contest’s initial Parent Consent Form asked for the child’s city of birth (not current city, mind you), date of birth, the last four digits of the child’s social security number, as well as complete contact info for the parents. Bob Bowdon, who directed The Cartel, a documentary about corruption in the public-school system explained the significance:
You see what Google knows and many parents don’t know is that a person’s city of birth and year of birth can be used to make a statistical guess about the first five digits of his/her social security number. Then, if you can somehow obtain those last four SSN digits explicitly — voila, you’ve unlocked countless troves of personal information from someone who didn’t even understand that such a disclosure was happening.
If the information Google culled from the contest was linked with other databases to target ads, it could prove lucrative for the company, which enlists promotional help from schools by offering prize money. But Bowdon says he has no evidence that Google has used what it learned for marketing purposes. Not to mention the fact that statistical guessing seems more manpower intensive than the type of passive data collection Google usually prefers (oh, hey there, Street View camera). However, within 26 hours of alerting the FTC, Google updated its consent form eliminating the request for the last four digits of the kid’s social security number but leaving in the question about birth city. Okay, class. Who wants to send in a doodle under the theme “Be sort of evil until someone figures it out”?
Read full story here