{"id":62239,"date":"2026-07-06T03:20:24","date_gmt":"2026-07-06T07:20:24","guid":{"rendered":"https:\/\/overcentral.com\/en\/?p=62239"},"modified":"2026-07-06T03:20:24","modified_gmt":"2026-07-06T07:20:24","slug":"eu-rules-google-search-hackers","status":"publish","type":"post","link":"https:\/\/overcentral.com\/en\/eu-rules-google-search-hackers\/","title":{"rendered":"EU Rules Expose Google Search Queries to Hackers"},"content":{"rendered":"

Google\u2019s top security executives are warning that proposed European<\/a> Commission regulations intended to open its search data and Android operating system to competitors could inadvertently expose users’ search queries to hackers and fuel a rise in cybercrime across the EU. The warnings come as officials prepare to make final decisions next month on two cases under the European Union\u2019s Digital Markets Act<\/a> (DMA), the landmark competition framework adopted in late 2022 to force Big Tech<\/a> gatekeepers to open their dominant platforms to rivals.<\/p>\n

How the Digital Markets Act Could Expose Google Search Data<\/h2>\n

The European Commission has proposed that Google<\/a> share anonymized search data with competitors on terms that match the data the company collects for itself. This includes any query input users type into Google Search, associated click data, and ranking results. The goal is to give rival search engines and AI services access to a dataset that has been exclusively controlled by Google for years, with the aim of fostering competition and reducing reliance on a small number of tech giants.<\/p>\n

Separately, the Commission is pushing for greater interoperability with Google\u2019s Android operating system. Both proposals are currently under public consultation, with final decisions expected by July 27.<\/p>\n

Google\u2019s Security Chief Warns of Fraud and De-Anonymization Risks<\/h2>\n

Heather Adkins, Google\u2019s vice president of security engineering and a founding member of its security team, has raised specific concerns about the practical implications of the proposed changes. On the Android side, Adkins predicts a rapid increase in fraud if the interoperability measures are implemented as currently described. \u201cIf implemented as described today, I think within a short period of time on Android, we\u2019d see a significant increase in fraud in the EU,\u201d Adkins said. \u201cThe fraudsters are creative and informed. Past implementation date, I would give it maybe weeks before we began to see an increase in fraud in Europe.\u201d<\/p>\n

Regarding Google Search, Adkins warned that sharing granular search query data\u2014even in anonymized form\u2014could allow bad actors to de-anonymize users. The concern is that small companies receiving this data could become prime targets for criminal hackers, potentially exposing sensitive personal information derived from what people type into Google.<\/p>\n

Competitors and Researchers Push Back on Privacy Concerns<\/h2>\n

Not all stakeholders share Google\u2019s alarm. Some competitors, independent researchers, and academics who have participated in the public consultations argue that the privacy and security risks have been overstated. They point out that the DMA already requires data to be anonymized and that there are established technical safeguards to prevent abuse. The Knight-Georgetown Institute\u2019s executive director, Alissa Cooper, noted that search query data is a unique dataset that no competitor can realistically replicate, making its sharing a critical lever for competition.<\/p>\n

The European Commission declined to respond directly to Google\u2019s security concerns but has emphasized that the DMA includes provisions to protect privacy and security. The agency is expected to issue its final rulings next month, which will determine the exact scope of the data-sharing and interoperability obligations.<\/p>\n

What the Proposed Changes Mean for Users<\/h2>\n

If the proposals go through as currently drafted, users in the EU could see their search queries\u2014including sensitive searches related to health, finances, or personal life\u2014shared with third-party search engines and AI services. While the data is intended to be anonymized, Google\u2019s security team argues that the volume and specificity of query data make re-identification feasible for determined adversaries. On Android, increased interoperability could open new vectors for malware and fraud, potentially affecting millions of devices.<\/p>\n

What Affected Users Should Do Now<\/h2>\n

For users concerned about the privacy and security implications of these proposed changes, the most effective course of action is to adopt defense-in-depth practices. Use a reputable VPN service with a verified no-logs policy and AES-256 encryption when searching online to add a layer of traffic protection. Enable two-factor authentication on all accounts, particularly your Google account, and monitor account activity for unauthorized access. Consider using a zero-knowledge password manager to generate and store strong, unique credentials. For Android users, avoid sideloading apps from untrusted sources and keep your device\u2019s security patches up to date. These measures will not only mitigate risks associated with potential data exposure but also strengthen your overall digital security posture against an evolving threat landscape.<\/p>\n","protected":false},"excerpt":{"rendered":"

Google\u2019s top security executives are warning that proposed European Commission regulations intended to open its search data and Android operating system to competitors could inadvertently expose users’ search queries to hackers and fuel a rise in cybercrime across the EU. The warnings come as officials prepare to make final decisions next month on two cases […]<\/p>\n","protected":false},"author":7,"featured_media":84416,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cards.overcentral.com\/cards\/en\/62239.png","fifu_image_alt":"EU Rules Expose Google Search Queries to Hackers","footnotes":""},"categories":[349],"tags":[],"class_list":["post-62239","post","type-post","status-publish","format-standard","has-post-thumbnail","category-articles"],"fifu_image_url":"https:\/\/cards.overcentral.com\/cards\/en\/62239.png","fifu_image_alt":"EU Rules Expose Google Search Queries to Hackers","_links":{"self":[{"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/posts\/62239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/comments?post=62239"}],"version-history":[{"count":0,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/posts\/62239\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/media\/84416"}],"wp:attachment":[{"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/media?parent=62239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/categories?post=62239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/overcentral.com\/en\/wp-json\/wp\/v2\/tags?post=62239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}