22 Dic For privacy’s sake, Yahoo will delete identifying data sooner
Columbus Dispatch, By Jessica Guynn, December 22, 2008
With U.S. and European regulators and watchdogs worried that Internet companies are compromising users’ privacy by keeping data about online behavior for long periods, Yahoo Inc. says it will shorten that time from 13 months to 90 days. The retention policy is the shortest among major U.S. search engines and could pressure rivals Google Inc. and Microsoft Corp. to reduce the time they keep information about their users. In September, Google began to remove some personally identifiable information after nine months. Microsoft, which keeps such data for 18 months, said last week it would support an industry standard of six months. Anne Toth, Yahoo’s vice president for policy and head of privacy, said the new policy differentiates Yahoo from its competitors and will build trust with users. She said Yahoo spent more than a year reviewing its practices. Kevin Bankston, senior staff attorney for the Electronic Frontier Foundation, said, “It’s always good when search companies start competing to provide more privacy for their users.” That competition is a direct result of growing pressure from European officials to better protect users’ privacy. They have urged search engines to expunge data after six months. Congress has also been investigating how technology companies track their users and their personal information. Rep. Edward Markey, D-Mass., chairman of the House Energy and Commerce subcommittee on telecommunications and the Internet, praised Yahoo’s new policy. “I urge other leading online companies to match or beat the commitments announced by Yahoo,” he said. Search engines have resisted shortening the time they keep personal information because they use it to better match advertisements to searches and improve the relevance of their results. Microsoft, a search laggard, has argued for all search engines to play by the same rules to create a level playing field. Under its new policy, Yahoo plans to delete the last digits of the numeric Internet Protocol (IP) address and alter tracking files called “cookies” within three months in most cases. Brendon Lynch, director of privacy strategy at Microsoft, said all search engines should adopt the software giant’s practice of deleting the entire Internet address and all cookies. “We believe there needs to be adoption across the industry both in timeframe and method,” Lynch said. Ask.com, owned by IAC/InterActiveCorp., a year ago began offering customers the ability to “opt out” of having their information stored for more than a few hours with a product called AskEraser. Yahoo does not plan to offer such an option, Toth said. Stronger privacy protections have not prompted many consumers to switch search engines. But privacy watchdog Jeffrey Chester said Yahoo’s new policy is a gambit as it battles Google and struggles to regain its footing after bungled takeover talks with Microsoft and a scuttled advertising partnership with Google. “A better approach to consumer privacy is one of the few possible competitive advantages Yahoo can embrace as it tries to survive as an independent company,” Chester said. “Like Microsoft, Yahoo wants privacy to set them off from Google.” Google declined to comment. It released a statement saying it is committed to striking the “appropriate balance protecting our users’ privacy and offering them benefits of data retention.” Yahoo will begin implementing its new policy next month and gradually include all the company’s services by mid-2010.