Google Shared Data With a Sanctioned Russian Company

pcmag.com:

Google shared user data with a Russian ad company, RuTarget, even after the firm was sanctioned in April as part of the US government's response to Russia's invasion of Ukraine in February.

The US Department of the Treasury said(Opens in a new window) that RuTarget's parent company, Sberbank, is "the largest financial institution in Russia and is majority-owned by the Government of the Russian Federation." Those factors are said to make Sberbank "uniquely important to the Russian Federation economy."

Google should have stopped sharing data with RuTarget after those sanctions were announced. But according to ProPublica(Opens in a new window) and Adalytics(Opens in a new window)—a self-described "crowd sourced social experiment" that gathers information about the ads shown to users of its browser extension—that didn't happen.

ProPublica reports that Google continued to share data with RuTarget after the sanctions were issued. That data could include "such critical information as unique mobile phone IDs, IP addresses, location information and details about users’ interests and online activity" on Ukrainian websites.

"Google is committed to complying with all applicable sanctions and trade compliance laws," Google spokesperson Michael Aciman said in a statement to PCMag. "We've reviewed the entities in question and have taken appropriate enforcement action beyond the measures we took earlier this year to block them from directly using Google advertising products."

Aciman said Google now prevents RuTarget from using techniques like cookie matching—which "allows you to match information in a cookie, such as an ID assigned to a user that browsed your website, with a corresponding bidder-specific Google User ID"—to bypass its