Home -> Law Blog Directory -> Intellectual Property Law Blogs -> Electronic Freedom Foundation - Deep Links

Intellectual Property Law

: Electronic Freedom Foundation - Deep Links

Yahoo To Anonymize Logs After 90 Days, Compared to Google's 9 Months

By bankston

pToday, Yahoo upped the ante when it comes to protecting search engine users' privacy, a href=http://yhoo.client.shareholder.com/press/releasedetail.cfm?ReleaseID=354703announcing a new data retention policy/a providing for anonymization of search queries mdash; as well as page views, page clicks, ad views and ad clicks mdash; after 90 days. This announcement comes on the heels of a href=http://www.eff.org/deeplinks/2008/09/google-cuts-server-log-retention-nine-monthsGoogle's announcement in September/a that it would be anonymizing its logs after 9 months./p pIt's always good to see search companies competing to provide more privacy to their users, and with this aggressive move, Yahoo has sent a serious shot across Google's bow. Yahoo has shown that a retention period shorter than Google's mdash; bmuch/b shorter than Google's mdash; is an achievable goal for a major search engine. This announcement should be followed by another from Google, promising to match or beat Yahoo's retention period. If it isn't, though, legislators, regulators and privacy advocates should demand an answer from Google to the question: If Yahoo can do it, why can't you?/p pUnfortunately, it's hard to gauge the true privacy impact of this policy change until we know exactly what steps Yahoo will be taking to anonymize the data. The devil's in the details, and if Yahoo's anonymization process isn't robust enough, this new logging policy may end up being more privacy PR than privacy protection. Fully anonymizing IP addresses and cookie data a href=http://news.cnet.com/8301-13739_3-10038963-46.htmlcan be tricky/a, and even if that data is thrown away completely, there's still the possibility of individuals being identified based on the content of their search queries, as a href=http://w2.eff.org/Privacy/AOL/AOL's search data spill/a a href=http://www.nytimes.com/2006/08/09/technology/09aol.html?_r=1demonstrated/a. /p pSo, as Yahoo finalizes its policy plans, it should take a look at EFF's newly-revised a href=http://www.eff.org/wp/ospBest Practices for Online Service Providers/a, which recommends a range of techniques to strongly anonymize online user data. Hopefully, we'll see the details of Yahoo's plan soon, as well as new announcements from other search engines trying to keep up in this accelerating privacy competition. Internet users have long trusted search engines and internet portals like Yahoo and Google with the privacy of their most intimate and sensitive data, and we're glad to see those companies finally vying to earn that trust./p

Full post as published by Electronic Freedom Foundation - Deep Links on December 17, 2008 (boomark / email).