Infrastructure // Unified Communications
05:37 PM
Connect Directly
Repost This

Google To Scramble Server Log Data Sooner

The company revises its policy and will now annonymize its server logs after 18 months.

On the heels of Privacy International's damning assessment of Google's privacy practices earlier this week -- one that Google characterizes as inaccurate -- Google Tuesday announced a new policy to annonymize its server logs after 18 months.

This represents reduction from Google's previous server log retention period of 18 to 24 months, which was established in March.

Peter Fleischer, global privacy counsel for Google said in a blog post on Monday that in light of concerns brought forth recently by an E.U. advisory panel, the Article 29 Data Protection Working Party, Google would change its server log retention policy.

"We believe that we can still address our legitimate interests in security, innovation and anti-fraud efforts with this shorter period," Fleischer said. "However, we must point out that future data retention laws may obligate us to raise the retention period to 24 months. We also firmly reject any suggestions that we could meet our legitimate interests in security, innovation and anti-fraud efforts with any retention period shorter than 18 months."

Google, like all major online service providers, retains server logs and user data for a variety of reasons, such as diagnosing service problems, maintaining system security, and compliance with laws.

Web server logs typically record a Web site visitor's IP address, the date and time of the visit, the files or Web page requested and the amount of data transferred, the user agent or software program making the request, and the referring Web site, if any. An ISP can usually identify the computer associated with one of its IP addresses at any given time, if required to.

Log anonymization, however, does not ensure the anonymity of those logged. "Logs anonymization does not guarantee that the government will not be able to identify a specific computer or user, but it does add another layer of privacy protection to our users' data," Google explains in its Google Log Retention Policy FAQ.

Fleisher said Google was also exploring ways to redesign browser cookies to expire sooner without forcing users to re-enter information stored in them. He said that Google is planning to announce cookie privacy improvements in a few months.

Google's push to personalize its online services though data retention and analysis; its acquisition of Internet ad firm DoubleClick; and the introduction of Google Maps Street View; not to mention its runaway success; have stoked scrutiny of the company's privacy practices.

Google has taken some notable pro-privacy stances in the past, particularly in its decision to resist a 2005 U.S. Department of Justice subpoena for search data. The company maintains that it "is committed to raising the bar on our own privacy practices for the benefit of Google users," as Fleisher put it in a June 10 letter to Peter Schaar, Chairman of the E.U.'s Article 29 Data Protection Working Party.

To some extent, Google is between a rock and a hard place when it comes to data retention, given that total anonymity and perpetual data retention both present obvious problems. "There is no single right answer to the question of how long server logs should be retained," as Google puts it.

But as Google's detractors are glad to point out, there are plenty of wrong answers.

Comment  | 
Print  | 
More Insights
Building A Mobile Business Mindset
Building A Mobile Business Mindset
Among 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps and it's past time for those with no plans to get cracking.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Elite 100 - 2014
Our InformationWeek Elite 100 issue -- our 26th ranking of technology innovators -- shines a spotlight on businesses that are succeeding because of their digital strategies. We take a close at look at the top five companies in this year's ranking and the eight winners of our Business Innovation awards, and offer 20 great ideas that you can use in your company. We also provide a ranked list of our Elite 100 innovators.
Twitter Feed
Audio Interviews
Archived Audio Interviews
GE is a leader in combining connected devices and advanced analytics in pursuit of practical goals like less downtime, lower operating costs, and higher throughput. At GIO Power & Water, CIO Jim Fowler is part of the team exploring how to apply these techniques to some of the world's essential infrastructure, from power plants to water treatment systems. Join us, and bring your questions, as we talk about what's ahead.