Microsoft to delete full Search IP addresses after 6 months

Microsoft to delete full Search IP addresses after 6 months

The news is just in that Microsoft is announcing that it will delete full IP addresses from their Bing search engine log files after 6 months. In July 2009, when Microsoft and YAHOO announced their search partnership, we predicted that real competition in the search arena between Google and Microsoft could lead to privacy benefits for consumers. Today, we are pleased to see Microsoft stepping up to the plate to delete one of the most sensitive and potentially identifiable elements in search log-files.

There is really no need to keep IP addresses long term to improve search results, when the primary geographic data can be immediately derived for use in search query analysis. At the same time, an IP address can be used by governments or legal adversaries as a key to a user’s identity. Search engines do need to keep IP addresses for a limited time to help with security and anti-fraud measures.

Here is a Microsoft chart showing the new Bing search data retention periods:

bingsearch

Yahoo’s current policy is to delete IP addresses at 3 months, with a small subset kept for 6 months for security uses. Google partially deletes IP addresses at 9 months by lopping off the last octect of the address.

Today’s announcement doesn’t affect practices around other cross-session identifiers, such as the hashed cookies maintained in search log files, so there is still work to be done in this area by Microsoft and Google.  But although a cookie enables potential research that can assemble enough data about some random selection of users who have provided enough clues due to their queries, it is the more sensitive IP address that is the key to being able to force the identification of any individual users. Kudos to Microsoft for this important search privacy advance.

Leave a Reply


Privacy Calendar

Dec
2
Tue
all-day IAPP Practical Privacy Series 2014
IAPP Practical Privacy Series 2014
Dec 2 – Dec 3 all-day
Government and FTC and Consumer Privacy return to Washington, DC. For more information, click here.
Dec
11
Thu
9:00 am Progress of the EU Data Protecti...
Progress of the EU Data Protecti...
Dec 11 @ 9:00 am
The EU Member States have agreed to conclude the negotiations on the EU Data Protection draft Regulation in 2015. The process will have arrived at a critical point by the end of this year. The[...]
Jan
26
Mon
8:30 am Privacy as a Profit Center: Leve... @ Old Slip by Convene
Privacy as a Profit Center: Leve... @ Old Slip by Convene
Jan 26 @ 8:30 am – Jan 27 @ 4:15 pm
Learn how those on the leading edge of privacy governance and digital innovation from companies including Cigna, Cisco Systems, eBay Inc. Public Policy Lab, FocusMotion,Ghostery, Goodyear Tire & Rubber Company, Google, HP Enterprise Security Products, JPMorgan[...]
Jan
28
Wed
all-day Data Privacy Day
Data Privacy Day
Jan 28 – Jan 29 all-day
“Data Privacy Day began in the United States and Canada in January 2008, as an extension of the Data Protection Day celebration in Europe. The Day commemorates the 1981 signing of Convention 108, the first[...]
Mar
4
Wed
all-day Global Privacy Summit 2015
Global Privacy Summit 2015
Mar 4 – Mar 6 all-day
For more information, click here.
Mar
10
Tue
6:00 pm CDT Annual Dinner “TechProm” 2015
CDT Annual Dinner “TechProm” 2015
Mar 10 @ 6:00 pm – 9:00 pm
Featuring the most influential minds of the tech policy world, CDT’s annual dinner, TechProm, highlights the issues your organization will be facing in the future and provides the networking opportunities that can help you tackle[...]
Mar
13
Fri
all-day BCLT Privacy Law Forum
BCLT Privacy Law Forum
Mar 13 all-day
This program will feature leading academics and practitioners discussing the latest developments in privacy law. UC Berkeley Law faculty and conference panelists will discuss cutting-edge scholarship and explore ‘real world’ privacy law problems. Click here[...]

View Calendar