CASE STUDY 1

The Vulnerability Disclosure Debate

1. Based on the case study, Microsoft has put an effort into the issues of consumer
privacy. Google needs to ensure that the consumer’s right to privacy is well
preserved. Upon this situation, define and identify the importance of consumer
right to privacy Google needs to abide. (10
Marks)

Privacy rights of consumers. People's privacy rights can be defined as the right to
choose how and how much information about themselves is revealed to third parties. It is
critical that Google protects consumer privacy rights. It is critical. Consumer privacy
rights protect people from embarrassing disclosures that interfere with their private lives,
cause harm, and lead to self-incrimination. It also allows for the intimacy that fosters
personal relationships, the trust, and confidentiality that underpins relationships between
customers and professionals, the ability to maintain social roles, and the ability to
influence how others perceive themselves.
Google's in-house security detected a bug, and Google has decided to follow a strict
90-day bug notification policy, with a 90-day public disclosure released regardless of
whether the bug was addressed. This decision goes beyond the consumer's right to
privacy. This is since when Google releases its software if the bug has not yet been
resolved, the bug will most likely expose user information. The user risks interfering in
his personal life. This reduces the customer's and Google's trust and secrecy.
 2. What is the balancing right to privacy and business needs that Microsoft and
Google need to take consider in order to ensure the consumer privacy is well
kept secure? (10 Marks)

The reason, significance, data, consent, precision, security, use of appropriate security,
and trade requirements that Microsoft and Google must consider. The primary could be used
as a target. The reason for collecting data on your clients must be a genuine commercial need
for Microsoft and Google. For example, when a client enters the Gmail address, the points of
interest should not be revealed to third parties and should only be used on Gmail.
The following one is crucial. Databases containing user information can only contain
information that is required for the database's construction. When you sign up for Gmail, for
example, Google will only submit basic information such as your name, phone number, and
date of birth. Microsoft and Google will not ask for their registration or account number. The
user will then be informed of the purpose of the information collected by Microsoft and
Google. This allows users to choose not to participate in transactions that result in
information about themselves that they do not want to reveal.
After that, it's consent. Microsoft and Google must request the information; has the user
agreed? Microsoft and Google will only collect information about their users if they have
explicitly or implicitly agreed to provide such information and the information is only to be
used for the purposes for which they have consented. Precision comes next. Microsoft and
Google must take reasonable steps to ensure that accurate information is retained, and
inaccuracies are corrected. Google, for example, should periodically request that users update
their Gmail to ensure the accuracy of information.
The final three are safety, beneficiaries, and applications. Microsoft and Google must
ensure the security of the information, not that the user has not explicitly or implicitly
consented to receive it or that it is being used in a way that the user has not consented to.
When a third party needs to use its information, Google must first consult with the customer.