Defending The Kingdom

After AOL published its users’ private search data last month, you may be wondering where it’s safe to do your searches. Who Which is the most trustworthy search engine? Is there something you can do so that you don’t have to trust the search engines at all? (continue reading…)

America Online fired two employees and its chief technology officer because of the release of user search data earlier this month, says the New York Times:

‘This incident took place because some employees did not exercise good judgment or review their proposal with our privacy team,’ Miller said in a second memo. ‘We are taking appropriate action with the employees who were responsible.’

Accountability is a good thing when it comes to enforcing privacy requirements in any organization, and AOL seems to be taking it seriously. The company is taking several steps to ensure that this never happens again, such as keeping tighter controls on employee access to data, educating employees about privacy issues, and reviewing data retention and privacy policies.

I hope other companies that harbour large collections of user data are paying close attention. Then again, AOL didn’t take the hint from privacy fiascos that came before it (for example, it has been just over a year since ChoicePoint, a company that gathers and sells data about consumers, announced that it gave up sensitive information on more than 160,000 people to criminals posing as ChoicePoint customers - the media coverage on the story was extensive). (continue reading…)

Wired News has an excellent article called FAQ: AOL’s Search Gaffe and You.

In it, questions such as “Why did AOL release the records?” and “AOL says it anonymized the data by replacing the AOL user ID with a randomized number. Is it possible for someone to figure out who I am just from my searches?” are posed and answered in a straightforward way.

The following question is probably the most pertinent for those who would like to avoid search engine privacy infringements:

Has the government ever requested such records before?

Yes. One attempt was made public last fall when Google fought a subpoena from the Justice Department which asked for similar records from AOL, MSN, Yahoo and Google. The feds wanted the records to help defend an ongoing court challenge to the Child Online Protection Act. Google largely won that battle, but Yahoo, MSN and AOL all turned over records to the government. The government may have also asked for large quantities of search records as part of antiterrorism efforts, but those subpoenas and warrants typically come with gag orders that would prevent the search engines from publicly discussing them.

As far as I know, MSN, Yahoo, and AOL didn’t put up the slightest resistance. Google is not beyond reproach on all things privacy related, but the company is certainly a big step ahead of its competition in this instance.