07/23: Microsoft Announces Plans for Search Data
Posted by Patrick
From the press release:
Todd Bishop has analysis.
Expanding on its ongoing work to help protect customer privacy, Microsoft Corp. today announced an enhanced set of privacy principles for Live Search and online advertising data collection, use and protection. The principles outline new, enhanced steps to help protect the privacy of Microsoft® Windows Live™ users, including making search query data anonymous after 18 months by permanently removing cookie IDs, the entire IP address and other identifiers from search terms. Microsoft will also work to give customers more control over what information it uses to personalize their online search experience. In connection with its efforts to support a common industry approach to privacy issues, Microsoft also announced that it will join the Network Advertising Initiative (NAI) later this year when it begins to offer third-party ad serving broadly. ...
Microsoft privacy principles for Live Search and online ad targeting include the following:
• User Notice. Microsoft will continue to be transparent about its policies and practices so that users can make informed choices. It will regularly update the Microsoft Online Privacy Statement, accessible from every page of each major online service it operates, to maintain transparency as its services evolve or its practices change. This will include an update to its privacy statement to provide more detail about online advertising and search data collection and protection.
• User Control. Microsoft will continue to implement new privacy features and practices as it continues to develop its online services and offer new controls that help users manage the types of communications they receive from Microsoft. For example, once the company begins to offer advertising services to third-party Web sites, it will offer customers the ability to opt out of the behavioral ad targeting by Microsoft’s network-advertising service on those Web sites. Microsoft also will continue to develop new user controls that will enhance privacy, such as letting people search and surf its sites without being associated with a personal and unique identifier used for behavioral ad targeting, and allowing signed-in users to control the personalization of the services they receive.
• Search Data Anonymization. Microsoft will implement specific policies around search query data, be explicit with customers about how long the company retains search terms in an identifiable way, and inform people of when and how it may “anonymize” such data. Specifically, Microsoft will make all Live Search query data anonymous after 18 months, unless the company receives user consent for a longer time period. This policy will apply retroactively and worldwide, and will include permanently removing the entirety of the IP address and all other cross-session identifiers, such as cookie IDs and other machine identifiers, from the search terms. It will ensure that any personalized search services involving users choosing a longer retention period are offered in a transparent way, with prominent notice and consent.
• Minimizing Privacy Impact and Data Protection. Microsoft will continue to design its systems and processes in ways that minimize the privacy impact of the data it collects, stores, processes and uses to deliver products and services. For example, Microsoft will store Live Search service search terms separately from account information that personally and directly identifies the person, such as name, e-mail address and phone numbers. Moreover, Microsoft will maintain and continually improve protection to prevent the unauthorized correlation of this data. Microsoft will ensure that any service requiring the connection of search terms to individually identifying account information is offered in a transparent way, with prominent notice and user consent.
• Legal Requirements and Industry Best Practices. Microsoft will continue to follow all applicable legal requirements as well as leading industry best practices in the markets where it operates. Microsoft adheres to globally recognized privacy standards set forth in the Organisation for Economic Co-operation and Development and Online Privacy Alliance guidelines, is a member of the TRUSTe Privacy Seal Program, and abides by the Safe Harbor framework set forth by the U.S. Department of Commerce. When it begins to offer advertising services on third-party Web sites, Microsoft will follow applicable NAI Principles.
More information, including the full text of Microsoft’s enhanced privacy principles for Live Search and online ad targeting, is available at http://www.microsoft.com/privacy.
Microsoft privacy principles for Live Search and online ad targeting include the following:
• User Notice. Microsoft will continue to be transparent about its policies and practices so that users can make informed choices. It will regularly update the Microsoft Online Privacy Statement, accessible from every page of each major online service it operates, to maintain transparency as its services evolve or its practices change. This will include an update to its privacy statement to provide more detail about online advertising and search data collection and protection.
• User Control. Microsoft will continue to implement new privacy features and practices as it continues to develop its online services and offer new controls that help users manage the types of communications they receive from Microsoft. For example, once the company begins to offer advertising services to third-party Web sites, it will offer customers the ability to opt out of the behavioral ad targeting by Microsoft’s network-advertising service on those Web sites. Microsoft also will continue to develop new user controls that will enhance privacy, such as letting people search and surf its sites without being associated with a personal and unique identifier used for behavioral ad targeting, and allowing signed-in users to control the personalization of the services they receive.
• Search Data Anonymization. Microsoft will implement specific policies around search query data, be explicit with customers about how long the company retains search terms in an identifiable way, and inform people of when and how it may “anonymize” such data. Specifically, Microsoft will make all Live Search query data anonymous after 18 months, unless the company receives user consent for a longer time period. This policy will apply retroactively and worldwide, and will include permanently removing the entirety of the IP address and all other cross-session identifiers, such as cookie IDs and other machine identifiers, from the search terms. It will ensure that any personalized search services involving users choosing a longer retention period are offered in a transparent way, with prominent notice and consent.
• Minimizing Privacy Impact and Data Protection. Microsoft will continue to design its systems and processes in ways that minimize the privacy impact of the data it collects, stores, processes and uses to deliver products and services. For example, Microsoft will store Live Search service search terms separately from account information that personally and directly identifies the person, such as name, e-mail address and phone numbers. Moreover, Microsoft will maintain and continually improve protection to prevent the unauthorized correlation of this data. Microsoft will ensure that any service requiring the connection of search terms to individually identifying account information is offered in a transparent way, with prominent notice and user consent.
• Legal Requirements and Industry Best Practices. Microsoft will continue to follow all applicable legal requirements as well as leading industry best practices in the markets where it operates. Microsoft adheres to globally recognized privacy standards set forth in the Organisation for Economic Co-operation and Development and Online Privacy Alliance guidelines, is a member of the TRUSTe Privacy Seal Program, and abides by the Safe Harbor framework set forth by the U.S. Department of Commerce. When it begins to offer advertising services on third-party Web sites, Microsoft will follow applicable NAI Principles.
More information, including the full text of Microsoft’s enhanced privacy principles for Live Search and online ad targeting, is available at http://www.microsoft.com/privacy.
Todd Bishop has analysis.
