Archive for the ‘Privacy’ Category

Leading the way on transparency

Friday, December 3rd, 2010

Yahoo! launched our Ad Interest Manager almost exactly a year ago.  This tool lets you opt out of interest-based advertising that Yahoo! delivers to you with one simple click but also lets you see the categories of interests we have associated with your browser. From Ad Interest Manager you can edit interest categories one by one, or easily opt out of all.

This level of transparency and control is designed to empower you with greater access than ever before to information you can use to make informed decisions about how your data is used.  Yahoo! supports industry efforts to adopt a single icon, served with all ads, to allow consumers to easily access our Ad Interest Manager and opt-out choices.  If you look at many of the ad placements on Yahoo! today you’ll already see icons that allow you to easily access your opt-out choices.  We’re in the process of transitioning to the industry icon in the coming weeks so you’ll see a consistent icon wherever interest-based ads are served. This icon has been embraced by TRUSTe, Better Advertising and a number of leading trade associations like the Network Advertising Initiative (NAI), Interactive Advertising Bureau, American Association of Advertising Agencies, Association of National Advertisers and the Direct Marketing Association.

We applaud the efforts led by for-profit organizations like TRUSTe and Better Advertising to bring all companies into the fold and, in particular, companies that do data mining and analysis that may not have a direct consumer presence or brand.  The NAI as an industry association has also done a tremendous job of bringing new members to their ranks to ensure that a standard privacy framework exists to ensure that consumers have meaningful choice about whether they receive interest-based ads or not. The more companies that participate in these programs, the better off consumers will be.

Our collective challenge going forward is to ensure cooperation and collaboration across these various efforts so that consumers will know what to expect and how to participate in a way that’s simple and consistent. We are committed to that goal.

Anne Toth

Chief Trust Officer

Making Products Better by Innovating with Integrity

Wednesday, October 27th, 2010

Today we are excited to launch the new Yahoo! Mail Beta – a substantially updated version of Yahoo! Mail that will make our leading web-based email service even better.  With the new Yahoo! Mail Beta, you will get an even more comprehensive and seamless email experience that will function across multiple devices. These new communications features will provide you with an easier, faster, and safer email experience, enabling a more productive, entertaining and informed online experience.

Online communications have become so much more than simply email messages.  Millions of times a day people send each other links to videos and pictures and receive notices about activity in their favorite social networks.  Our goal with the new Yahoo! Mail Beta is to make it easier for users to engage in these multi-media and social experiences.  For example, rather than having to click on a link to a video or pictures being shared with you that spawns a new browser window or tab, Yahoo! Mail Beta will provide you with the ability to directly access photo slideshows and video players directly within their inbox from services like Flickr, Picasa and YouTube.  In the future we hope to allow you to easily post comments and status updates directly from email messages as well.  Features like these save you time and allow you to get back to your inbox view easily to complete the tasks you started.

These features are enabled by extending the same basic technology that uses computer systems to identify patterns to identify SPAM, malware and viruses in messages. Leveraging that same pattern-matching technology, we can identify words, links, names, email addresses, and subjects in email to learn what matters most to you.  This allows us to provide you with features such easy access to slideshows and videos in your email. It will also enable us to identify keywords in messages to make advertising more relevant.  Advertising is what supports our free content and allows us to provide unlimited mail storage.  Ads are an important part of the online experience and we’d like them to be at least as useful as the content you are accessing on our services.

How interest-based advertising works and your choices

In order to make our ads more relevant and useful for you, we make educated guesses about your interests based on your activity on Yahoo!’s sites and services – the pages you view, the links you click, the ads you view and click, and the searches you conduct.  Now with Yahoo! Mail Beta, our “guesses” will also be informed by keywords from email.  These keywords may contribute to the interest categories we assign to your browser for interest-based ads that we show throughout the Yahoo! Ad Network.  This scanning won’t cause you to see any more ads in Yahoo! Mail Beta or from Yahoo!, but you will hopefully see more relevant ones.
We are committed to providing consumer control over interest-based advertising.  Yahoo! Ad Interest Manager allows you to see and manage your interest categories or opt-out of interest-based advertising altogether.  You can also see all of our standard interest categories.  If you’ve opted out before, that opt-out remains in effect. No keyword data from email is used to inform interest-based ads from the Yahoo! Ad Network once you’ve opted out.

Innovation with integrity

We are always striving to make our products better. It’s essential in a competitive marketplace and we believe that it’s good for consumers.  This means adding new features, improving design and anticipating the needs of the community of email users. But while new features can be hugely beneficial, change can also be jarring and disruptive, especially when they happen frequently or without advanced notice.  We take it as our responsibility to be very clear about the changes that we make in our products and to describe what effect this might have on you.  I call this innovation with integrity.  Change is a constant and brings great benefits. But if you don’t understand or consent, then it can be a problem.

We have made changes to our Terms of Service and Mail Privacy Policy for the new Yahoo! Mail Beta that address for these new features and features to come. To use the new Mail Beta, we ask you to agree to these changes. We have designed the consent process to be very upfront about what these changes are with a short but very clear consent screen so you can make an informed decision.  The key product changes are put front and center.  This is critically important to us and is the keystone to maintaining our relationship of trust with you and all of our users.

During the beta period for our new Mail product, we welcome your feedback on our new product features and design.   We are really proud of the new Yahoo! Mail Beta and hope that it represents the innovation with integrity that we strive to provide you.  Clarity, honesty and choice are the keys to user trust. We work hard to earn and keep your trust each and every day.

Anne Toth
Chief Trust Officer

Sharing Our Responses on Privacy

Friday, October 8th, 2010

A couple of months ago Yahoo!, along with a dozen other online companies, received a letter from Representatives Edward Markey and Joe Barton requesting information about our privacy practices.  Protecting user privacy and maintaining user trust are essential and critical aspects of all we do here at Yahoo!  We share Representatives Markey and Barton’s commitment to protecting user privacy online and welcome working with members of Congress to further highlight the many privacy protections Yahoo! already employs throughout all of our services.

If you are interested in reading our complete response to Representatives Markey and Barton, you can read our response letter.

Anne Toth

Chief Trust Officer

Nearing One Trillion Impressions

Tuesday, October 5th, 2010

Yahoo! is excited to contribute to the recently announced Digital Advertising Alliance and the unified support for the Advertising Option Icon.  Providing users with information about how interest-based advertising works and tools to control their experience WITH each ad is an important step forward for modern privacy.  By placing transparency and control within the context of the advertising experience, the industry and Yahoo! are advancing the privacy dialog with users. This is the essence of “Privacy By Design”.

Yahoo! saw the opportunity to significantly increase the level of consumer awareness and control with respect to interest-based advertising through icons and launched an early version of CLEAR Ad Notice or the “Advertising Option Icon” this year.  With north of 700 BILLION impressions on Yahoo! properties in the US, we’re on target to have displayed the Advertising Option Icon over a TRILLION times by the end of the year.

This is just the beginning.  Stay tuned for updates in 2011 as Yahoo! and others in the industry begin passing more detailed information about an ad (called “metadata”) with the ad itself.  This will allow us to provide even more transparency and user choice in the ad serving process.

Shane Wiley
Sr. Director – Privacy & Data Governance
Yahoo!

Globe-trotting for Consumer Empowerment!

Wednesday, February 17th, 2010

I’m zipping around the world to spread the word on consumer empowerment, privacy and child safety. Yesterday I participated in a panel at the Mobile World Congress in Barcelona. Entitled “Consumer Empowerment via the Mobile Internet,” the panel was moderated by Ambassador David Gross and was the beginning of an entire day focused on enabling the mobile future. Other panelists included Stephen Balkam, CEO of the Family Online Safety Institute (FOSI – of which Yahoo! is a board member), Lynne Dorward the Group Chief Regulatory Officer at Zain, Matthias Kurth of BNetzA Germany, and H.E Mr. S Poghisio who is the Minister for Information and Communications for Kenya.

I was truly inspired by the work that my fellow panelists are doing to enable consumers across the world to access and use the Internet as never before. That is where consumer empowerment begins. We talked about new fiber optic cables that are providing Kenyans with high-speed Internet access for the first time, mobile banking that gives farmers and small businessmen in developing countries access to new commerce tools even if they don’t have a bank account, digital citizenship and safety in a world of distributed devices in the hands of young people, and the idea of self-regulatory models of governance in privacy that enable global standards that move at the speed of the Internet.

Since the Internet is truly global, I was asked about the challenges of applying a patchwork of global and even state standards to services that we provide to Yahoo!’s 500 million users around the world. I indicated that it is, indeed, hard to do and short of a miraculous global regulatory order appearing one day (think Star Trek), this will continue to be a challenge for global companies. This is why we prefer a self-regulatory model whenever possible. It’s nimble, responsive, and allows us to create a consistent, portable, and global standard. I strongly believe there is evidence to support that self-regulation can work. One of our own examples is Yahoo!’s data retention policy move from holding identifiable log file data for 13 months down to 90 days for most log file data. Such a dramatic change to minimize how long we hold identifiable data is evidence of how self-regulation helps drive innovation at a rapid pace. If a law had been passed to set a 13 month standard, it’s not at all certain that companies would be motivated to move more aggressively. This is not just self-regulation, but positive competition within the industry. In the end, consumers win.

As the title of the panel says, it is all about consumer empowerment. Giving consumers access to information, means of communication, education on how to use these powerful tools, and portable controls that help them manage safety and privacy are all part of our mission at Yahoo!.

Anne Toth
VP Global Policy and Head of Privacy
Yahoo!

You Think What Would Be Creepy?!

Saturday, February 6th, 2010

On January 28, I was honored to be a part of the FTC’s second panel in a series of three that focuses on consumer online privacy. Hosted by the Berkeley Center for Law and Technology, this second of three public events was designed to explore the privacy challenges that are posed by technology and business practices that collect and use consumer data. Mine was the first panel that discussed the landscape and tee’d up additional panels that looked at privacy as it relates to social networking, cloud computing, mobile computing and legislation around ever-evolving technologies.

To listen to hear my comments which were quite colorful and got the room roaring, view the FTC’s webcast. The third FTC roundtable is scheduled for March 17 in Washington, DC.

Additionally, I was part of this year’s State of the Net conference held on January 27 in Washington, DC. My panel, “Debating the Framework for Online Privacy” also included Chuck Curran of Network Advertising Initiative, The Honorable Philip Dunne a Member of UK Parliament, Marc Groman of the House Committee on Energy & Commerce, and Ari Schwartz the VP and COO of Center for Democracy and Technology. The panel focused on aspects of Fair Information Practices that may be the basis for federal privacy legislation. The evening prior to the main event allowed for networking and education on Yahoo!’s privacy efforts (focusing on Ad Interest Manager and our upcoming CLEAR Ad Notice) to members and staffers on the Hill.

It continues to be a real pleasure for me to participate in these panels and provide insight into how companies like Yahoo! can provide a more compelling online experience while placing a premium on user privacy. By bringing content and advertising to you that is relevant and tailored to your interests, our customized “smart” services save you time and cut through the clutter. At the same time, Yahoo! is proud to be an industry leader with our commitment to data privacy, leading the way in establishing a relationship of trust with our users and implementing responsible self-regulation.

Anne Toth
VP Global Policy & Head of Privacy
Yahoo!

Yahoo! Europe’s Ad Interest Manager and European Public Policy

Wednesday, January 27th, 2010

Yahoo! was very pleased to participate in a recent IAPP-hosted conference entitled “The New EU Cookie Consent Law – What is Your Strategy?” Rosa Barcelo, a Senior Lawyer in the European Data Protection Supervisor’s Office and Eduardo Ustaran, Partner and Head of the Privacy and Information Law Group, Field Fisher Waterhouse LLP rounded out the engaging discussion allowing me to give a company perspective on the issue.

The conversation focused on European public policy debates about cookies – what they are, how they are used to power products and services on a website, where this fits within emerging European legal framework(s) and what controls exist for users around such technologies? The group discussed where we’ve been under the earlier ePrivacy Directive, and where we may be going to reinforce website users’ meaningful control over their online experience.

An amendment to the ePrivacy Directive recently passed into law requires consent of Internet users before programs (including cookie files) can be placed on their computers. All that remains for the law to go into force is implementation on the local level by the EU Member States over the next 18 months. Over the coming year, the public policy community will look at current practices, emerging consumer transparency and control mechanisms, and the evolution of consumer privacy communications as an indicator of how Member States and companies themselves will manifest this “update” to the Directive through real consumer enhancements.

It was against this backdrop that I was glad to share the recent BETA versions of Yahoo!’s own work in this arena, in the form of Yahoo!’s Ad Interest Manager. Now available on Yahoo!’s French, Spanish, Italian, German, UK and Ireland sites, Ad Interest Manager takes an innovative approach to consumer transparency and control around interest-based advertising. As our users will see, these tools provide an unprecedented view into both the advertising categories used to choose the most relevant ads for them on our websites, but also a view into the information used to make those decisions. Powered with this information, users can exercise strong control over both the individual categories assigned for their browser and the interest-based advertising program a whole.

Thanks again to Ms. Barcelo, Mr. Ustaran and the rest of the team at the IAPP for a thoughtful and informative session!

If interested in hearing more about this conversation, the conference was recorded and is available on the IAPP website.

On a related upcoming note, Chris Sherwood—Yahoo!’s Public Policy Director in Brussels–will be speaking at a meeting of the European Parliament’s new Privacy Platform on Wednesday Jan 27th, specifically about our Ad Interest Manager project and the innovations that we’ve brought to our European consumers through these tools. The event is entitled “awareness and empowerment: the role of users in privacy protection.” Anyone interested in attending should contact Sophie In ‘t Veld, MEP.

Justin B. Weiss
Director – International Privacy
Yahoo! Inc.

2009 in Review

Sunday, January 24th, 2010

Happy New Year!  Yahoo! is very excited about all of the progress we made in 2009 and look forward to an equally productive year for consumer privacy in 2010.

Here is a look back at some of Yahoo!’s big wins for consumers in 2009…

User Transparency:

  • We launched Ad Interest Manager (privacy.yahoo.com/aim) which offers users unparalleled insight into their activities at Yahoo! and more control over Yahoo’s use of data for display interest based advertising.
  • We added a new footer link called “About Our Ads” to almost every page at Yahoo! so that more information about our ad personalization and serving practices – including a link to the Ad Interest Manager is just a click away.
  • We served nearly 2 BILLION public service announcement ads across Yahoo! explaining our ad personalization and serving practices – including a link to user controls for interest based advertising.
  • We refreshed the look and feel of the Privacy Center in the US and are in the process of rolling out these updates globally.
  • Yahoo!, in collaboration with the ad industry, launched experiments in new forms of user notice in close proximity to ads (check out the “AdChoice” link at http://green.yahoo.com/living-green).

User Control:

  • Yahoo! allowed logged in users to make their opt-out choice persistent.  For users who select to do so, they can associate their opt-out with their Yahoo! account – this means the opt out will be refreshed each time a user logs in on any computer or device.
  • We extended the opt-out to our mobile platform – including persistence for logged in users.  This allows user choice to seamlessly flow across computing devices.
  • We changed opt-out cookie expiration dates from the standard 2 years we apply to Yahoo! cookies to 20 years so that opt-out cookies are less likely to expire – making user preferences more durable.
  • We updated our web servers and data handling processes to remove opted-out user activity from our ad interest systems.

Data Anonymization:

  • While not strictly in 2009 Yahoo! announced a game changing user data log retention policy in late 2008 to anonymize user data log events (searches, ad views, ad clicks, page views, and page clicks) within 90 days (with some exceptions for security and fraud abuse detection and defense needs and to meet legal obligations).
  • We’ve made great strides in 2009 and are on track for implementing anonymization across Yahoo! systems in 2010.

Shane Wiley
Sr. Director – Privacy & Data Governance
Yahoo!

Extending our opt-out cookie’s shelf life

Tuesday, July 28th, 2009

Many users of the Internet are now aware of what cookies are – small files on a computer that store preferences for the user. What many may not be aware of, however, is that every web browser cookie comes with an expiration date – much like the “sell by” date on food items you purchase in the store. Once the expiration date is reached, the cookie becomes “stale” and must be replaced with a new web browser cookie. It’s relatively rare for web site privacy policies to include cookie expiration dates but they are visible in the cookie files themselves. These dates can range from minutes to decades from the date the cookie is set. Although a decades-long cookie sounds like a long time, in practical terms most cookies don’t last for very long. Recent research from TRUSTe shows that users are being more proactive in managing their cookies either by actively deleting them (nearly half of all users clear their cookies on a weekly basis), or by using anti-spyware packages that clear cookies (including opt-out cookies) on a regular basis. In the grand scheme of things these factors makes cookie expiration dates less important but some concerns have been raised.

A few months ago, Yahoo! made changes to make our opt-out cookie persistent to address the concern that opt-out cookies may be inadvertently deleted by users. Today users can make their opt-out both persistent and portable by linking their opt-out choice to their Yahoo! ID. Under this process, the opt-out cookie (and its expiration date) is refreshed at every login.

A more recent issue has been raised by Chris Soghoian, a graduate student fellow at the Berkman Center for Internet & Society at Harvard University. Chris has asked the NAI (Network Advertising Initiative – a group of ad serving companies focused on self-regulation in this area) to set a minimum expiration date of 5 years on online behavioral advertising opt-out cookies and to post the expiration date on the opt-out page as well. We agree that this makes a lot of sense so we revisited this issue.

Yahoo! has been in the process of implementing a two-year cookie expiration date for all Yahoo! cookies. That is why the opt-out cookie for those not making their opt-out persistent is currently set to two years but we recognize that opt-out cookies should be dealt with differently from other kinds of preferences. Yahoo! will be moving forward with extending the expiration date on our opt-out cookies to 20 years (erring on the side of being conservative). Implementing the 20-year expiration date on our opt-out cookie will take us some time to deploy across the thousands of systems we have around the globe, but we aim to have this process completed by the end of the year. We thank Chris for bringing this issue to our attention.

Consumers can learn more about their system’s browser cookies and the expiration dates by visiting Internet Options in their web browser (under “Tools” in Internet Explorer). On the General tab, under Browsing history, click Settings. Then click the View Files button. In this view, you’ll see every cookie on your system and its associated expiration date. To clear a single cookie, simply right-mouse click on that cookie and select Delete.

To learn more about how Yahoo! treats cookies, please visit the Cookie module in our Privacy Center.

Shane Wiley
Sr. Director – Privacy & Data Governance
Yahoo!

Online Privacy, Advertising, and Self-Regulation – A Move in the Right Direction

Thursday, July 2nd, 2009

Today another important step was taken to protect privacy online and Yahoo! is proud to have played a part. The largest media and marketing trade associations in the US announced self-regulatory principles for online privacy. These groups include the Association of National Advertisers (ANA), American Association of Advertising Agencies (4A’s), Direct Marketing Association (DMA) and Interactive Advertising Bureau (IAB). Collectively, these groups count more than 5,000 member companies among them, including some of the most recognized brands and web sites in the world. These organizations collaborated with the Council of Better Business Bureaus, known for being an important voice for consumers both online and offline, and the Network Advertising Initiative, which represents the top network advertising companies that deliver the majority of interest-based ads across the Internet.

Yahoo! is excited about this effort and what it adds to the steps that Yahoo! has already taken over the last year to protect user privacy online.

Let me tell you why Yahoo! believes this initiative is significant:

  • This new self-regulatory effort is the first time publishers, agencies and advertisers have committed to privacy principles for data collected and used for interest-based advertising. Each of these entities plays an important role in purchasing, developing, delivering, and displaying online advertising and now, everyone is working together. Self-regulation is most effective when everyone is on board. This effort demonstrates real scale and collaboration.
  • This new effort answers the FTC’s call to industry to respond to their principles and to demonstrate meaningful self-regulation. Here, industry is doing just that.
  • While many ad networks and web sites have been offering users transparency through privacy notices and user control via opt-out links for years, these principles will lead to even greater transparency across an incredibly broad swath of the Internet’s most popular sites.
  • Perhaps most importantly, this effort will offer consumers greater control over the collection and use of data in a more transparent fashion when they go online.
  • I testified before Congress only a couple of weeks ago about these issues. In my testimony I explained that Yahoo! prefers self-regulation because it is the only form of regulation that can move as quickly as the Internet. Case in point – over the past year alone Yahoo! has announced a number of improvements to transparency, control and data retention. We have:

  • Redesigned our Privacy Center for better ease of use and navigation for users with prominent links to our interest-based advertising opt-out. Our Privacy Center remains linked to from nearly every page on the Yahoo! site.
  • Improved our opt-out to apply to interest-based advertising both on and off the Yahoo! network of websites AND allowed for it to be persistent so users don’t have to opt-out multiple times if their cookies get deleted.
  • Announced a policy to dramatically reduce our data retention period while broadening the scope of data covered. We will de-identify log file data at or before 90 days (it was previously 13 months) with limited exceptions to help fight fraud, secure systems, and meet legal obligations. We vastly increased the scope of this policy beyond search log files to our log file systems that hold page views, page clicks, ad views and ad clicks.
  • Improved as we go. In the process of implementing our data retention policy, we decided to completely delete IP address for most log file data at or before 90 days. Previously we had agreed to remove the last octet (or last section of numbers).
  • Run a consumer education ad campaign, showing on average 200 million advertisements per month across our sites promoting online privacy awareness.
  • All these steps are important to educating consumers about their choices, but this is only the beginning. There is a lot of work ahead to implement these principles to ensure that privacy is protected and industry is able to flourish. But today we began with an important step in the right direction.

    Anne Toth
    VP of Policy
    Head of Privacy