Private medical data - Google targeted ads

[ArMaP]

We don't really know because they don't say how the data was collected other than that trackers were used. It stands to reason that if an employee with admin rights logged in to the site with the trackers on it that the data could have been gleaned from there. We don't know if the DMV gave Google an indexing account with access to customer data.

If those trackers are what I'm thinking then they have to be inserted on the pages' HTML code, so that's not something they really control. If an idiot puts a tracker on a private page then they are really giving Google access to information that should be private.