Full Breakdown
Google Scientist Warns EU Data-Sharing Proposal Risks Privacy
5/6/2026, 5:17:13 AM
Core Event: Privacy Concerns Over EU Search-Data Sharing
On 5 May 2026, Sergei Vassilvitskii, a scientist at Google, submitted written comments to the European Commission warning that the proposal to share search data with rivals like OpenAI could expose personal information. He said the anonymisation method could be reversed by modern AI, noting that Google’s internal “red team” re-identified users in under two hours. Vassilvitskii will meet EU officials on 6 May 2026 to discuss safeguards.
Background & Context: EU Competition Policy and the DMA
The European Commission, the EU competition enforcer, has used the Digital Markets Act (DMA) to label Google a “gatekeeper” and require it to give rivals data on FRAND terms. The draft expands sharing to ranking, query, click and view records. The United States has publicly criticised the proposal as regulatory overreach.
Data & Timeline
- 5 May 2026 – Vassilvitskii’s written comments submitted.
- 6 May 2026 – Meeting with EU antitrust officials.
- 27 July 2026 – Commission to finalize rules.
- Non-compliance could trigger fines up to 10 % of Google’s global annual revenue under the DMA.
Official Statements & Responses
Google called the draft “regulatory overreach” that could jeopardise privacy and security, but offered to share technical expertise to help the Commission set guardrails. The Commission framed the measure as a step toward fair competition, saying anonymised data will be provided to rival search services on FRAND terms. Both indicated the final rules will be issued by 27 July 2026 and compliance will be monitored under the DMA.
Criticism & Opposition
Google’s main objection is the adequacy of the Commission’s anonymisation. Vassilvitskii’s red-team test, which reportedly re-identified users in two hours, shows the risk that AI could reverse anonymisation. The United States also opposes the measures, saying they could hinder innovation and burden U.S. firms in Europe.
Verbatim Quotes
- “We are concerned because the EC’s approach to anonymisation fails to protect Europeans’ privacy: our red team managed to re-identify users in less than two hours,” — Sergei Vassilvitskii, Google
- “We are concerned because the EC’s approach to anonymisation fails to protect Europeans’ privacy: our red team managed to re-identify users in less than two hours,” — Sergei Vassilvitskii
- “We are eager to share our technical expertise and work with the EC to establish the right guardrails and protect Europeans from privacy harm,” — Sergei Vassilvitskii
- “The EU proposal, which will be finalised in the coming weeks following feedback from interested parties, has triggered a furious response from Google, which called it regulatory overreach that could jeopardise users’ privacy and security.” — Google spokesperson
What’s Next
After the 6 May meeting, the Commission will incorporate feedback and publish final rules by 27 July 2026. Google’s compliance will be assessed under the DMA, with fines if required safeguards are not met.
