Microsoft to delete full Search IP addresses after 6 months

Microsoft to delete full Search IP addresses after 6 months

The news is just in that Microsoft is announcing that it will delete full IP addresses from their Bing search engine log files after 6 months. In July 2009, when Microsoft and YAHOO announced their search partnership, we predicted that real competition in the search arena between Google and Microsoft could lead to privacy benefits for consumers. Today, we are pleased to see Microsoft stepping up to the plate to delete one of the most sensitive and potentially identifiable elements in search log-files.

There is really no need to keep IP addresses long term to improve search results, when the primary geographic data can be immediately derived for use in search query analysis. At the same time, an IP address can be used by governments or legal adversaries as a key to a user’s identity. Search engines do need to keep IP addresses for a limited time to help with security and anti-fraud measures.

Here is a Microsoft chart showing the new Bing search data retention periods:

bingsearch

Yahoo’s current policy is to delete IP addresses at 3 months, with a small subset kept for 6 months for security uses. Google partially deletes IP addresses at 9 months by lopping off the last octect of the address.

Today’s announcement doesn’t affect practices around other cross-session identifiers, such as the hashed cookies maintained in search log files, so there is still work to be done in this area by Microsoft and Google.  But although a cookie enables potential research that can assemble enough data about some random selection of users who have provided enough clues due to their queries, it is the more sensitive IP address that is the key to being able to force the identification of any individual users. Kudos to Microsoft for this important search privacy advance.

Leave a Reply


Privacy Calendar

Sep
15
Mon
all-day Big Data: A Tool for Inclusion or Exclusion? @ Constitution Center
Big Data: A Tool for Inclusion o… @ Constitution Center
Sep 15 all-day
The Federal Trade Commission will host a public workshop entitled “Big Data: A Tool for Inclusion or Exclusion?” in Washington on September 15, 2014, to [...]
Sep
17
Wed
all-day IAPP Privacy Academy and CSA Congress 2014 @ San Jose Convention Center
IAPP Privacy Academy and CSA Con… @ San Jose Convention Center
Sep 17 – Sep 19 all-day
This fall, the International Association of Privacy Professionals (IAPP) and Cloud Security Alliance (CSA) are bringing together the IAPP Privacy Academy and the CSA Congress [...]
Oct
21
Tue
6:00 pm Consumer Action’s 43rd Annual Awards Reception @ Google
Consumer Action’s 43rd Annual Aw… @ Google
Oct 21 @ 6:00 pm – 8:00 pm
To mark its 43rd anniversary, Consumer Action’s Annual Awards Reception on October 21, 2014, will celebrate the theme of “Train the Trainer.” Through the power of [...]
Jan
28
Wed
all-day Data Privacy Day
Data Privacy Day
Jan 28 all-day
“Data Privacy Day began in the United States and Canada in January 2008, as an extension of the Data Protection Day celebration in Europe. The [...]
Jan
28
Thu
all-day Data Privacy Day
Data Privacy Day
Jan 28 all-day
“Data Privacy Day began in the United States and Canada in January 2008, as an extension of the Data Protection Day celebration in Europe. The [...]

View Calendar