Yahoo to anonymize user data after 90 days

By Larry Dignan , ZDNet
Thursday, December 18, 2008 08:51 AM

Yahoo said Wednesday that it will make its user logs anonymous within 90 days as it ups the ante on data retention policies.

In a statement, Yahoo said it would also make user data on page views, page clicks, ad views, and ad clicks anonymous as well as its user logs. The only exceptions would be for "fraud, security, and legal obligations".

Clearly, Yahoo, Google, and others are racing to the bottom on data retention policies. In particular, Google and Yahoo have been playing a game of privacy leapfrog.

In September, Google said it would make its user logs anonymous after nine months, a vast improvement over its previous 18-month policy. Google, which was pressured by regulators, said that nine months was a good balance between "sometimes conflicting factors like privacy, security, and innovation". In July 2007, Yahoo went with a 13-month purge policy.

Anne Toth, Yahoo's head of privacy, said that 90 days was the minimum time it needed to retain user data for business purposes. Yahoo reached that conclusion after a review of its data policies across the globe and consulting business, engineering, governance, and product teams.

As for the exceptions Yahoo said:

"To protect users and our business partners, there will be some specific and limited exceptions to the anonymization policy. In order to fight fraud and preserve system security, Yahoo will retain system specific data in identifiable form for no more than 6 months--but only for this purpose. Yahoo may have to retain data for longer periods to meet other legal obligations."

This article was first published as a blog post on ZDNet.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Migrating DHCP from Windows 2000 Server/Windows Server 2003 to Windows Server 2008

Windows Server

With a little bit of work, it's not hard to migrate DHCP services from Windows 2000 Server or Windows Server 2003 to Windows Server 2008. Here's how.


Read more »



Do we need more delivery centers?

Blog thumbnail

As I wrote a while back in about "racing to subsidies", there certainly is an increased focus by governments to attract delivery centers to their region. To do that, many..... by Michael Rehkopf

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web