Google lets Gmail and Photos fuel ad targeting

New privacy clause opens Gmail and Photos to ad personalization

Google announced that, effective October 16, its privacy policy will allow data from Gmail, Drive and Google Photos to be used for personalized advertising when users enable the Personal Intelligence feature. The change adds an exception to the long‑standing promise that the company would not use those services for ad targeting. The clause reads that data may be used “unless you choose to make data from these services available to other Google services that support personalized ads.” (HN)

Personal Intelligence is marketed as a way for Search, Gemini Apps and other AI‑powered tools to draw on a user’s own content to improve recommendations. Enabling the feature therefore creates a legal pathway for Google to match ad inventory to the topics inferred from a user’s emails, documents or photos. The company stresses that advertisers never see raw content or personally identifying details, and that ads will not be based on sensitive categories such as race, religion or health. (HN)
\

How the feature works and what users can control

When Personal Intelligence is on, Google may process snippets of data that a user has allowed Search or Gemini to access. For example, a search for “mountain bikes” could trigger YouTube ads for sports equipment, derived from the same query and any related content stored in Drive or Photos. The policy explicitly ties the ad personalization to the user’s settings: disconnecting an app from Personal Intelligence or disabling Personalized Recommendations in the Search Services Personalization page stops the data flow. (HN)

The company provides a dedicated settings page where users can toggle the feature for each app. The wording in the policy makes clear that the decision is optional; opting out restores the previous stance of not using Gmail, Drive or Photos for ad targeting. However, the default for many Android users is to have Personal Intelligence enabled, meaning the new clause could affect a large portion of the Android ecosystem without a visible prompt. (9to5Google)
\

EU regulators demand a pause amid privacy concerns\

Less than two weeks after Google publicized the policy overhaul, the Article 29 Working Party – the EU body that coordinates national data‑protection authorities – sent a letter to co‑founder Larry Page asking the company to pause the rollout scheduled for March 1, 2012. The letter, signed by Jacob Kohnstamm, Chairman of the Working Party, cites the “wide range of services” and their popularity as reasons to scrutinize the potential impact on EU citizens’ personal data. (EU Regulators Ask Google to “Pause” Privacy Changes)

France’s CNIL was tasked with leading the coordinated investigation. The regulators’ request does not allege a specific breach of the GDPR but seeks to ensure that the new clause does not undermine the legal safeguards that EU users enjoy. Google’s spokesperson, Anthony House, replied that the company had already communicated the changes to users and that delaying the update would cause confusion. He also noted that earlier consultations with regulators had not raised “substantial concerns.” (EU Regulators Ask Google to “Pause” Privacy Changes)
\

The broader context: policy consolidation and user‑facing language\

Google’s privacy overhaul is part of a larger effort to merge more than 60 product‑specific policies into a single, streamlined document. Associate General Counsel Mike Yang announced that the company would delete redundant clauses and simplify legal language for non‑lawyers. The updates, slated for October 3, will also retire twelve product‑specific policies – including those for Gmail, Calendar and Maps – folding them into the main Google Privacy Policy. (HN)

The move to a unified policy has drawn criticism from privacy advocates who argue that a single document can obscure service‑specific nuances. The addition of the ad‑targeting exception for Personal Intelligence is the first substantive change to the way Google handles data for advertising in years, according to the 9to5Google report. While the company claims the change is limited to users who actively opt in, the default settings on many Android devices make the opt‑in status less transparent. (9to5Google)
\

What to watch next\

The immediate question is whether Google will honor the EU working party’s request to pause the March 1 rollout, or proceed as scheduled. Watch for a formal response from the CNIL and any subsequent amendments to the policy language. A second focal point will be user behavior: metrics on how many Android users keep Personal Intelligence enabled after the October 16 effective date will indicate the real‑world reach of the new ad‑targeting capability. Finally, monitor competing platforms – particularly Microsoft’s recent anti‑Google campaign – for any strategic shifts that could amplify the regulatory pressure on Google’s data practices.