More NewsGoogle Gets Special Message from E.U. Regulators on Data Retention

Google Gets Special Message from E.U. Regulators on Data Retention

E.U. data protection officials have sent letters to Google, Yahoo and Microsoft regarding the anonymizing of users’ search data.

Major search engines are breaching European data protection laws by ineffectively anonymizing data on users’ search activity, according to E.U. regulators. Google was singled out for disregarding the group’s guidance on IP address storage.

The Article 29 working party – a group of data protection officials that advises the European Commission – sent public letters to Google, Yahoo, and Microsoft this week arguing their methods for the deletion of search logs do not meet E.U. privacy laws.

The European Commission currently recommends users’ IP-addresses should be deleted completely after a period of six months. However, the working party argued that most major search providers retain cookie information on users for considerably longer, meaning they can easily retrieve IP addresses every time a user makes a new query. “WP29 cannot conclude your company complies with the European data protection directive,” the group said. It added that a third party should be put in place “to reassure users that [search engines” are delivering on privacy promises.”

Jacob Kohnstamm, chairman of the working party, said he has also notified the FTC of its concerns. “I have asked the FTC to use its authority to examine the compatibility of this behavior with section 5 of the Federal Trade Commission Act.”

In its correspondence with Google specifically, the group also criticized the company for objecting to cut its IP address retention period to six months. Yahoo, Microsoft, and Ask have all agreed to meet this request, but Google currently holds on to data for nine months, claiming the period represents “the right balance between user privacy and maintaining the security and innovation of [Google’s” underlying systems.” The group said it “strongly suggests” Google should review its retention policy to bring it into line with the recommended period of a maximum of six months.

Earlier this month the working party also sent a letter to Facebook criticizing its privacy practices, suggesting the group is stepping up its scrutiny to match the increased concerns of users regarding the security of their personal information online.

Related Articles

How to measure a multi-channel marketing strategy

Digital Marketing How to measure a multi-channel marketing strategy

2m Tereza Litsa
The future of retail: How IoT is transforming the retail industry

Digital Transformation The future of retail: How IoT is transforming the retail industry

3m Diana Maltseva
GDPR: The role of technology in data compliance

Data & Analytics GDPR: The role of technology in data compliance

10m Clark Boyd
What companies can learn from the We-Vibe lawsuit about the Internet of Things

Legal & Regulatory What companies can learn from the We-Vibe lawsuit about the Internet of Things

1y Al Roberts
Has advertising arrived on Google Home?

Media Has advertising arrived on Google Home?

1y Al Roberts
Target is the top retail digital marketer, so why is it struggling?

Ecommerce Target is the top retail digital marketer, so why is it struggling?

1y Al Roberts
YouTube is "on pace to eclipse TV" thanks to savvy algorithm use

More News YouTube is "on pace to eclipse TV" thanks to savvy algorithm use

1y Al Roberts
YouTube is getting rid of 30-second unskippable pre-roll ads

Ad Industry Metrics YouTube is getting rid of 30-second unskippable pre-roll ads

1y Al Roberts