Author Archives: Michael Froomkin

Yahoo! Not-So-Much-Privacy Policy

Posted on July 6, 2011 by Michael Froomkin

Yahoo! has revised its Privacy Policy. Instead of holding user search and other data for 90 days, it will hold it for 18 months. And then it will not delete it but will just “annonymize” it — something we know doesn’t work very well.

Why move to a so-much-more-evil policy? The stated reason is given as:

To meet the needs of our consumers for innovation, personalization and relevance, Yahoo! is moving to align our log file data retention policy closer to the competitive norm across the industry.

Is 18 months really closer to the “competitive norm across the industry”? Not if you define the industry to include more than the US: In Europe, the law requires ‘anonymization’ after six months. In the US, Google keeps anonymizes IP addresses after 9 months and cookies in search engine logs after 18 months. The EU is not happy about this.

Yahoo! Data Retention FAQ:

Q: Why is Yahoo! changing its user log data retention policy?
A: To meet the needs of our consumers for innovation, personalization and relevance, Yahoo! is moving to align our log file data retention policy closer to the competitive norm across the industry. Once the new policy goes into effect, we will no longer apply a 90-day retention policy to raw search logs or other log file data and will instead hold raw search log files for 18 months prior to anonymization. As for non-search data, we will be removing the current 90-day retention period for these log files as we re-examine the right policy going forward that allows us to meet consumer demand for richer, more deeply personal experiences in our products.

Q: What is Yahoo!’s updated user log data retention policy?
A: Yahoo!’s new policy will be to de-identify search log data within 18 months of collection with limited exceptions to meet legal obligations. For other, non-search log data we collect, that data will be retained for a longer period in order to power innovative product development, provide personalized experiences, and better enable our security systems to detect and defend against fraudulent activity.

Q: When will the updated policy go into effect?
A: Yahoo! is providing advanced notice to our users of our intention to change our log file data retention policy. Yahoo! is rolling out notifications across Yahoo! to help ensure that we have given appropriate notice to our consumers of this change in our policy. Thirty days after we have completed these notifications, we will put the new policy into effect. We expect this will occur sometime in mid-to-late August.

Q: Does this change the data retention period for data collected prior to the update?
A: No – Yahoo! will only apply the updated retention period to data collected AFTER the updated policy goes into effect.

I see that the original announcement was in April. I guess I just don’t use Yahoo! much — and here’s one more reason not to.

Posted in Law: Privacy | 1 Comment

Painful Joke

Posted on July 5, 2011 by Michael Froomkin

The Republican vision is that 20 white male billionaires will own everything and rule the world with an iron whip. The Democratic vision is completely different, in that not all the billionaires will be white men.

via A Tiny Revolution

Posted in Politics: US | Comments Off

Taddeo in FL-25?

Posted on July 1, 2011 by Michael Froomkin

Politico says Annette Taddeo is planning to run in FL-25 — the seat now held by Republican David Rivera, a strong contender for most ethically creepy member of Congress.

I was, as longtime readers may recall, a big supporter of Taddeo when she ran for Congress in my district, FL-18. I even went out and canvassed for her here in my neighborhood. I do think she’d make a great Congressperson.

But. Can she pull it off?

I though Taddeo ran a good campaign for Congress in 2008. I was impressed by her work ethic, organization, and by the staff she put together. The fact is that Ileana Ros-Lehtinen is just very hard to beat due her giant war chest (she spent $3m beating Taddeo) and, to be fair, also her personal rapport with so many of the voters here, a rapport sufficient to overcome a number of policies that work against the district’s actual interests.

Taddeo then ran for County Commissioner in District 8. As I live (just) outside District 8, I didn’t pay that much attention to the race, but Taddeo narrowly failed to make the run-off in a crowded field.

All of which is preamble to the question whether FL-25 is a good fit? Not that I have someone better in mind, or that I doubt they’d be lucky to have her, I’m just wondering how she’ll play in the district.