At Google I/O, the company announced a batch of privacy and security controls aimed at giving users more say over their data. The announcements include a cross-product security alert icon, expanded personal info removal from Search, a new My Ad Center, and improved phishing protection inside Workspace.
It is a real bundle of features, and most of it is worth turning on. The question is which pieces are structural and which are surface.
At a glance
- A new security alert icon will surface across Gmail, YouTube, and Search when action is needed.
- Workspace customers will get better phishing and malware protection and automatic two-step confirmation enrollment.
- Google will expand personal info removal from Search to include phone, email, and physical address.
- My Ad Center will let users adjust ad topics and personalization.
- Google will publish more information on how it chooses which ads to show.
How the new features actually work
The security alert icon is the most visible change. A small yellow badge on your profile picture means Google has flagged something you should look at, from a hijacked session to a risky app permission. The expansion to Workspace is more enterprise-flavored, with phishing and malware protection inside Docs, Sheets, and Slides, and automatic enrollment in two-step confirmation, which closes a long-standing gap.
The personal info removal expansion is straightforward. Today, you can already ask Google to remove bank account and credit card numbers from Search. The new tool will cover phone numbers, email addresses, and physical addresses—the kind of information that powers doxxing and SIM swap reconnaissance.
My Ad Center is the most user-visible of the new features, because it puts ad personalization in a place people will actually find. The trade-off is that the controls are bounded. You can pick which topics you want to see more or less of, and choose whether ads are personalized, but you cannot opt out of personalized ads entirely, and the underlying data collection is unchanged.
Who should care
| User type | Key features | Priority |
|---|---|---|
| Personal account users | Security alert icon, personal info removal tool, My Ad Center | High—take action on all three once available |
| Workspace admins | Auto 2-step confirmation enrollment, enhanced phishing protection | High—prepare comms and audit rollout timeline |
| At-risk users (public figures, activists, journalists) | Personal info removal, security alerts | Critical—submit removal requests immediately |
| Privacy purists | My Ad Center | Medium—useful for tuning, but not a structural shift |
Our analysis
The trade-off between user-facing controls and structural privacy has been a Google pattern for years, and this bundle is no exception. The phishing protections and the personal info removal tool are real wins, because they reduce the attack surface. My Ad Center is a settings screen, not a privacy shift.
The most interesting piece is the two-step confirmation auto-enrollment for Workspace. Most account takeovers that lead to real damage still start with a password-only login, and getting the entire Workspace base onto 2-step confirmation is one of the cheapest, highest-use security moves a SaaS platform can make. If Google executes this well, account-takeover numbers should drop.
The risk: auto-enrollment without user buy-in can backfire. Users who get pushed into 2-step confirmation without understanding it often choose weak second factors or abandon the process. Watch how Google handles that UX.
What to watch next
Watch the rollout timeline for the personal info removal tool, expected in the Google app in the coming months. Watch the false-positive rate on Workspace phishing warnings. And watch the My Ad Center defaults—Google controls what "less" and "more" mean, and the difference between a useful settings screen and real privacy choice hinges on those defaults.
Bottom line: turn on what you can, expect the defaults to do most of the work, and treat My Ad Center as a control panel, not a cure.
Key takeaways
- The security alert icon and Workspace auto-2-step confirmation enrollment are the highest-use changes.
- Personal info removal from Search is a real win against doxxing and SIM swap reconnaissance.
- My Ad Center is a settings screen, not a structural privacy shift.
- Phishing protection inside Docs, Sheets, and Slides closes a real, long-standing gap.
Frequently asked questions
What is Google's new security alert icon?
A yellow badge shown on your profile picture across Gmail, YouTube, and Search when Google has detected a security issue that needs your attention.
Will Google Workspace auto-enroll users in two-step confirmation?
Yes. Workspace customers will be automatically enrolled in two-step confirmation.
What kind of personal information can I now remove from Search?
Phone numbers, email addresses, and physical addresses, in addition to the bank account and credit card numbers already supported.
What is My Ad Center?
A new interface that lets users adjust which ad topics they see more or less of, choose whether ads are personalized based on what Google knows about them, and select preferred ad categories like fitness, vacation rentals, or skin care.
Are these changes a real privacy shift or just a settings screen?
Mostly settings, with a few structural changes. The phishing protection, two-step confirmation auto-enrollment, and personal info removal are real wins. My Ad Center is a control panel, not a cure.