Google Reverses Course: Human Reviewers Can See Personal Drive Files
Update to Gemini policy means connected Drive and email files may be routed to human annotators, with warnings about potential exposure of confidential information
Google has reversed its commitment to not have human reviewers see personal content from Gmail, Docs, and Drive, and now routes connected Drive and email files to human annotators. This change applies to Consumer Google Accounts, which are governed by the standard Gemini Apps Privacy Notice and Gemini Apps Activity.
The updated policy is reflected in Google's Help Answer 16836988, which confirms that connected Drive and email files are routed into human review pipelines. Google warns users that human reviewers may see confidential information from connected Drive and email files, and advises against connecting apps that contain sensitive information.
Testing has shown that connected Drive and email files can be ingested into human review pipelines without explicit tags, and the payload capture is probabilistic. There are four possible scenarios when testing the ingestion of personal data: Zero Retrieval, Metadata/Generic Summary, Partial Unredacted Extraction, and Full-File Ingestion.
Google Workspace commercial accounts, on the other hand, operate under separate Cloud Data Processing Addenda (DPA) that contractually exclude human review and external generative training by default. This means that business and enterprise users are not affected by the updated policy.
## Why it matters The reversal of Google's commitment to not have human reviewers see personal content is significant, as it may expose confidential information to human annotators. Users who have connected their personal Drive and email files to Gemini should be aware of the potential risks and take steps to protect their sensitive information. Google's updated policy highlights the importance of carefully reviewing the terms and conditions of online services and understanding how personal data is being used.
The change in policy was first announced in an edit to a 2023 blog post on October 16, which reflected the updated policy on human review of connected Drive and email files. Users who are concerned about the potential exposure of their personal data should review their connected apps and consider disconnecting any that contain sensitive information.
