The fallout from AOL's unintended release of personal search data of 658,000 subscribers could include fines, lawsuits, and changes in law and policy regarding search queries.
surviving rape, how to tell family members about incest and where people with HIV can find help.
Aftab said she believed that lawyers would be looking to sue under consumer fraud laws for violating customer agreements. Aftab noted, however, that she is not suggesting that AOL violated its privacy policies and has not reviewed them in connection with this disclosure. Others said they believe the company may have violated the Electronic Consumer Privacy Act of 1986.
Sherwin Siy, a lawyer for the Electronic Privacy Information Center said that any lawsuits resulting from the disclosure are likely to come from individuals and play out differently in each state, depending on tort laws in those states.
"It will affect individual people and will affect those people a great deal," he said during an interview. "It won't show up as a dollar amount for the FTC to take action against. It's not as quantifiable a harm, which creates a problem for people who are affected by this and it makes it much more difficult to make things right."
Siy said AOL didn't "just lose some money and have credit reports to fix."
"It's a more emotional and traditional sense of privacy," he said. "There are some things that other people shouldn't know about me. What I think, what I read, is something that I should be able to keep to myself. People should be able to determine how they hold themselves out to the public and AOL has removed some of that power."
Derek Slater, an activist with the Electronic Frontier Foundation, said during an interview that the release shows why Internet companies should not be collecting and storing such information in the first place.
"The hope is that out of this horrible disaster with AOL, we can get better policies," he said. "AOL did a great disservice to their customers here. They don't have to keep these logs. There's nothing forcing them to keep these logs."
He also said the company has downplayed how easily identities can be linked to the search information and "needs to be held to account."
Kevin Bankston, a lawyer for EFF, said the group is looking into taking action.
"This is the first time we've seen a huge release of search data," he said. "There's never been any disclosure of search terms of this scale. No court has ruled on whether search is protected by statute. When the laws were written, search terms didn't exist."
IT's Reputation: What the Data SaysInformationWeek's IT Perception Survey seeks to quantify how IT thinks it's doing versus how the business really views IT's performance in delivering services - and, more important, powering innovation. Our results suggest IT leaders should worry less about whether they're getting enough resources and more about the relationships they have with business unit peers.
What The Business Really Thinks Of IT: 3 Hard TruthsThey say perception is reality. If so, many in-house IT departments have reason to worry. InformationWeek's IT Perception Survey seeks to quantify how IT thinks it's doing versus how the business views IT's performance in delivering services - and, more important, powering innovation. The news isn't great.