Google To Scramble Server Log Data Sooner - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Software // Information Management
05:37 PM
Connect Directly

Google To Scramble Server Log Data Sooner

The company revises its policy and will now annonymize its server logs after 18 months.

On the heels of Privacy International's damning assessment of Google's privacy practices earlier this week -- one that Google characterizes as inaccurate -- Google Tuesday announced a new policy to annonymize its server logs after 18 months.

This represents reduction from Google's previous server log retention period of 18 to 24 months, which was established in March.

Peter Fleischer, global privacy counsel for Google said in a blog post on Monday that in light of concerns brought forth recently by an E.U. advisory panel, the Article 29 Data Protection Working Party, Google would change its server log retention policy.

"We believe that we can still address our legitimate interests in security, innovation and anti-fraud efforts with this shorter period," Fleischer said. "However, we must point out that future data retention laws may obligate us to raise the retention period to 24 months. We also firmly reject any suggestions that we could meet our legitimate interests in security, innovation and anti-fraud efforts with any retention period shorter than 18 months."

Google, like all major online service providers, retains server logs and user data for a variety of reasons, such as diagnosing service problems, maintaining system security, and compliance with laws.

Web server logs typically record a Web site visitor's IP address, the date and time of the visit, the files or Web page requested and the amount of data transferred, the user agent or software program making the request, and the referring Web site, if any. An ISP can usually identify the computer associated with one of its IP addresses at any given time, if required to.

Log anonymization, however, does not ensure the anonymity of those logged. "Logs anonymization does not guarantee that the government will not be able to identify a specific computer or user, but it does add another layer of privacy protection to our users' data," Google explains in its Google Log Retention Policy FAQ.

Fleisher said Google was also exploring ways to redesign browser cookies to expire sooner without forcing users to re-enter information stored in them. He said that Google is planning to announce cookie privacy improvements in a few months.

Google's push to personalize its online services though data retention and analysis; its acquisition of Internet ad firm DoubleClick; and the introduction of Google Maps Street View; not to mention its runaway success; have stoked scrutiny of the company's privacy practices.

Google has taken some notable pro-privacy stances in the past, particularly in its decision to resist a 2005 U.S. Department of Justice subpoena for search data. The company maintains that it "is committed to raising the bar on our own privacy practices for the benefit of Google users," as Fleisher put it in a June 10 letter to Peter Schaar, Chairman of the E.U.'s Article 29 Data Protection Working Party.

To some extent, Google is between a rock and a hard place when it comes to data retention, given that total anonymity and perpetual data retention both present obvious problems. "There is no single right answer to the question of how long server logs should be retained," as Google puts it.

But as Google's detractors are glad to point out, there are plenty of wrong answers.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
What Digital Transformation Is (And Isn't)
Cynthia Harvey, Freelance Journalist, InformationWeek,  12/4/2019
Watch Out for New Barriers to Faster Software Development
Lisa Morgan, Freelance Writer,  12/3/2019
If DevOps Is So Awesome, Why Is Your Initiative Failing?
Guest Commentary, Guest Commentary,  12/2/2019
White Papers
Register for InformationWeek Newsletters
Current Issue
Getting Started With Emerging Technologies
Looking to help your enterprise IT team ease the stress of putting new/emerging technologies such as AI, machine learning and IoT to work for their organizations? There are a few ways to get off on the right foot. In this report we share some expert advice on how to approach some of these seemingly daunting tech challenges.
Flash Poll