FTC votes to penalize Google $22.5 million for Safari cookies
(Reuters) - Regulators will require Google Inc to pay a civil penalty of $22.5 million to settle charges that it bypassed the privacy settings of customers using Apple Inc's Safari browser, two people familiar with the matter said on Tuesday.
Context & Ripple Effects
This vote closes an arc that has been building since spring: the Wall Street Journal reported new privacy probes into Google in March, Bloomberg reported in May that a U.S. fine over the Safari breach was coming (Google Said to Face Fine Over Safari Breach), and the Journal reported three weeks ago that the two sides were nearing a privacy settlement. Today's $22.5 million civil penalty is the number those reports were circling.
The charge itself is settled fact: Google bypassed the privacy settings of customers using Apple's Safari browser. The pickup is unusually broad — the New York Times, CNET, The Verge, 9to5Mac and others all ran the story the same day — reflecting how directly it lands on both companies: Google's tracking practices and Apple's role as the platform whose settings were circumvented.
First-order effects
- Google pays a $22.5 million civil penalty to the FTC and settles charges that it bypassed Safari's privacy settings, ending a probe first reported in March 2012.
- Apple faces renewed questions about its own stack: the violation occurred inside Safari, so the case tests whether browser-level privacy settings are treated as commitments users can rely on.
Second-order effects
- The penalty gives operational force to the FTC's March 2012 privacy framework, which called for 'privacy by design' — recommendations issued weeks before this probe resolution now have a headline enforcement example attached.
- Rival ad-dependent platforms are put on notice that the same standard applies to them; the FTC was simultaneously probing Facebook's Instagram acquisition, showing the agency working multiple fronts against large consumer-data companies at once.
Third-order effects
- If the pattern holds, cookie-based tracking defaults shift from an engineering choice to a regulated compliance surface, with penalties becoming a recurring cost of doing business for ad-funded platforms rather than a one-off embarrassment.
- Browser vendors gain leverage: when a regulator treats a browser's privacy settings as the legal boundary, the company controlling the browser — here Apple — becomes the de facto enforcer whose settings carry regulatory weight.
The trend: U.S. regulators are shifting consumer-privacy enforcement from written guidelines to monetary penalties aimed at the largest ad-data collectors, with browser privacy settings emerging as the line that cannot be crossed.