Extensions in Google Chrome and Drive get stricter privacy policy

Google has announced a stricter privacy policy for extensions in Google Chrome and apps that use Google Drive cloud storage. Extensions, for example, can no longer just ask for broad access to data.

According to Google itself, there are now over 180,000 extensions in the Chrome Web Store and almost half of all desktop users of the browser actively use extensions. Now, however, these extensions have two new rules that they have to comply with.

Google Chrome Rules

First of all, from now on the extensions will only be allowed to request access to the data they really need to implement their functions. If there is more than one permissions option that can be used to implement a function, then developers must use the option that gives access to the least amount of data.

The second new rule requires that all extensions now post a privacy policy in the Chrome Web Store. This rule has long existed for extensions that use personal and sensitive user data, but is now set for all extensions that use user-created content and personal communication.

The changes will not be rolled out until the summer, but have already been announced to give developers time to adapt their extensions to comply with the rules.

Google Drive

Google has also announced that there will be additional, similar rules for third-party apps that use Google Drive. By connecting to third-party apps, Drive remains a central place for all files and to collaborate with others.

However, these apps can have access to a wide range of content and data in Drive. According to Google, the new rules restrict such access. From now on, third party apps will only be able to access specific files – the ones they need. Backup services and other apps that need wider access are of course excluded from the policy. However, Google will verify those apps in advance.

The rules for Google Drive will apply from the beginning of next year.