Microsoft said that it would comply with regulators.
Oggi sul NYT ho trovato la notizia che Bing (MS) ha dichiarato che rispettera' la normativa sulla protezione della privacy. http://www.nytimes.com/2010/01/20/technology/companies/20search.html?ref=bus... A prescindere da ogni considerazione sul merito, mi pare un dato interessante quanto l'opinione pubblica sia "intellettualmente assuefatta" alla non-compliance con la disciplina sulla privacy (e non solo). Tanto che la dichiarazione che MS rispettera' la legge e' una notizia... Ma ancora NYT riporta: “Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequences” La regolamentazione sulla privacy sembra essere considerata un inconveniente di cui e' tuttavia necessario prendersi cura per migliorare la propria immagine... Che ne e' stato dell'importanza di rispettare la legge in quanto tale? Allora, vale la pena di chiedersi se questa situazione sia dovuta a: i) una normativa troppo severa/complicata/inapplicabile e quindi incompatibile con l'ordinario svolgimento delle attivita', oppure ii) un sistema di enforcement inefficace o comunque insufficiente. O forse a entrambe le cose. C. Microsoft Puts a Time Limit on Bing Data By KEVIN J. O’BRIEN Published: January 19, 2010 Bowing to pressure in Europe, Microsoft said Tuesday that it would comply with regulators and discard all data collected on users of its Bing search engine after six months. John Vassallo, a Microsoft vice president and associate general counsel, said the company would introduce the change over the next 18 months. The company aims to satisfy a European advisory group that had been critical of how search engines collect and retain data on individuals for advertising purposes. The concession, relatively painless for Microsoft given its tiny share of the global search market — just 3 percent — is yet another example of an American technology giant’s changing its way of doing business to suit stricter European concepts of antitrust and privacy laws. The European Commission in December dropped an antitrust case against Microsoft after the software maker took the unprecedented step of agreeing to distribute the browsers of its competitors through its Windows operating system. Unlike the agreement on browsers, which will be confined to consumers in Europe, Microsoft’s decision to discard data will affect users around the world, including in the United States. Hendrik Speck, a professor of computer science at the University of Applied Sciences in Kaiserslautern, Germany, said competitors would probably follow Microsoft’s decision because consumers were increasingly concerned about online privacy amid widespread data theft and rising use of social networks. “Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequences,” Professor Speck said. Europe is the world’s largest market for Internet searches, accounting for 32 percent of online queries, according to comScore, a market research company. The Asia-Pacific region had 31 percent of searches and North America 22 percent, according a comScore report in July. Google has a 67 percent share of the global search market, according to comScore, but a more than 80 percent share in Europe, where Microsoft has just 2 percent of the market. In 2008, a panel of national privacy regulators from each European Union country asked Microsoft, Google and Yahoo to eliminate all online query data, like a computer’s unique identification number, location and the text typed into search fields, after six months. The panel, known as the Article 29 Working Group, held a hearing with representatives of the search engine companies last February, and has given each until the end of January to respond. Like other search engines, Bing had been keeping user data for more than 18 months. Last year, Microsoft said it would change its policy to make an individual’s Internet protocol, or I.P., address anonymous after six months if its major competitors did also. In its announcement Tuesday, Microsoft said it would delete I.P. addresses after six months but would retain cookies and other session identifiers — software that recognizes a returning computer — for 18 months. Once it deletes an I.P. address, Microsoft said the link between data and a specific computer became effectively untraceable. In a statement, Google gave no indication it would accept the European Union’s demands. The company’s global privacy counsel, Peter Fleischer, reaffirmed Google’s policy of making user data anonymous after nine months, saying it struck the proper balance between ensuring user privacy and refining the functioning of its leading search engine. “Data from our search queries represents a crucial arm in our battle to protect the security of our services against hacks and fraud,” Mr. Fleischer said. “It also represents a critical element allowing us to help users by innovating and improving the quality of our searches.” Yahoo, which had been deleting only a portion of individual I.P. addresses, said it would now delete the entire address after 90 days and make anonymous the log of a user’s activities. The policy would not apply to requests from law enforcement agencies that data be retained, said Amber Allman, a Yahoo spokeswoman. Mr. Vassallo, the Microsoft executive, said his company’s decision to conform to European requests on data retention was meant to avert the possibility of new regulation. “It is possible that the European Union will take a position to regulate this one way or the other,” Mr. Vassallo said. “That would need a high level of responsibility from industry.” Carmelo Fontana carmelo_fontana@yahoo.it
Caro Carmelo, cari tutti, credo che occorra considerare con attenzione il contesto, come del resto suggerisci anche tu alla fine della tua email. Il periodo massimo di 6 mesi a cui si riferisce la notizia e` una richiesta del gruppo di lavoro Articolo 29 (WP29), contenuta nella loro opinione 1/2008 (disponibile presso http://ec.europa.eu/justice_home/fsj/privacy/workinggroup/wpdocs/2008_en.htm). Le opinioni del WP29 non sono generalmente vincolanti per gli Stati Membri o gli operatori economici dell'Unione Europea, ancor meno per quegli operatori che - a torto o a ragione - sostengono che il processamento dei dati personali avviene al di fuori del territorio dell'Unione Europea. (Sto semplificando molto, il problema giurisdizionale della Direttiva 95/54/EC e` complesso ed e` uno dei nodi che si affronteranno nel corso della relativa revisione - ma l'opinione 1/2008 contiene una discussione molto interessante anche su questo punto.) Dunque, in assenza di norme vincolanti, la decisione di un operatore economico di agire in una direzione o in un'altra e` giocoforza determinata dalle pressioni di mercato. In questo senso, l'immagine di un'azienda percepita dai consumatori gioca, non solo in questo settore, un ruolo importantissimo. Le norme europee sulla protezione dei dati personali sono sicuramente complesse, ma non piu` che in altri settori. Il problema, alla fine, continua ad essere la discrasia tra norme "locali" e comportamenti "globali". Ciao, Andrea On Wed, Jan 20, 2010 at 11:35:23AM +0100, Carmelo Fontana wrote:
Oggi sul NYT ho trovato la notizia che Bing (MS) ha dichiarato che rispettera' la normativa sulla protezione della privacy.
http://www.nytimes.com/2010/01/20/technology/companies/20search.html?ref=bus...
A prescindere da ogni considerazione sul merito, mi pare un dato interessante quanto l'opinione pubblica sia "intellettualmente assuefatta" alla non-compliance con la disciplina sulla privacy (e non solo). Tanto che la dichiarazione che MS rispettera' la legge e' una notizia...
Ma ancora NYT riporta: “Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequences”
La regolamentazione sulla privacy sembra essere considerata un inconveniente di cui e' tuttavia necessario prendersi cura per migliorare la propria immagine... Che ne e' stato dell'importanza di rispettare la legge in quanto tale?
Allora, vale la pena di chiedersi se questa situazione sia dovuta a: i) una normativa troppo severa/complicata/inapplicabile e quindi incompatibile con l'ordinario svolgimento delle attivita', oppure ii) un sistema di enforcement inefficace o comunque insufficiente. O forse a entrambe le cose.
C.
Microsoft Puts a Time Limit on Bing Data By KEVIN J. O’BRIEN Published: January 19, 2010 Bowing to pressure in Europe, Microsoft said Tuesday that it would comply with regulators and discard all data collected on users of its Bing search engine after six months.
John Vassallo, a Microsoft vice president and associate general counsel, said the company would introduce the change over the next 18 months. The company aims to satisfy a European advisory group that had been critical of how search engines collect and retain data on individuals for advertising purposes.
The concession, relatively painless for Microsoft given its tiny share of the global search market — just 3 percent — is yet another example of an American technology giant’s changing its way of doing business to suit stricter European concepts of antitrust and privacy laws.
The European Commission in December dropped an antitrust case against Microsoft after the software maker took the unprecedented step of agreeing to distribute the browsers of its competitors through its Windows operating system.
Unlike the agreement on browsers, which will be confined to consumers in Europe, Microsoft’s decision to discard data will affect users around the world, including in the United States.
Hendrik Speck, a professor of computer science at the University of Applied Sciences in Kaiserslautern, Germany, said competitors would probably follow Microsoft’s decision because consumers were increasingly concerned about online privacy amid widespread data theft and rising use of social networks.
“Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequences,” Professor Speck said.
Europe is the world’s largest market for Internet searches, accounting for 32 percent of online queries, according to comScore, a market research company. The Asia-Pacific region had 31 percent of searches and North America 22 percent, according a comScore report in July. Google has a 67 percent share of the global search market, according to comScore, but a more than 80 percent share in Europe, where Microsoft has just 2 percent of the market.
In 2008, a panel of national privacy regulators from each European Union country asked Microsoft, Google and Yahoo to eliminate all online query data, like a computer’s unique identification number, location and the text typed into search fields, after six months.
The panel, known as the Article 29 Working Group, held a hearing with representatives of the search engine companies last February, and has given each until the end of January to respond.
Like other search engines, Bing had been keeping user data for more than 18 months. Last year, Microsoft said it would change its policy to make an individual’s Internet protocol, or I.P., address anonymous after six months if its major competitors did also.
In its announcement Tuesday, Microsoft said it would delete I.P. addresses after six months but would retain cookies and other session identifiers — software that recognizes a returning computer — for 18 months. Once it deletes an I.P. address, Microsoft said the link between data and a specific computer became effectively untraceable.
In a statement, Google gave no indication it would accept the European Union’s demands. The company’s global privacy counsel, Peter Fleischer, reaffirmed Google’s policy of making user data anonymous after nine months, saying it struck the proper balance between ensuring user privacy and refining the functioning of its leading search engine.
“Data from our search queries represents a crucial arm in our battle to protect the security of our services against hacks and fraud,” Mr. Fleischer said. “It also represents a critical element allowing us to help users by innovating and improving the quality of our searches.”
Yahoo, which had been deleting only a portion of individual I.P. addresses, said it would now delete the entire address after 90 days and make anonymous the log of a user’s activities. The policy would not apply to requests from law enforcement agencies that data be retained, said Amber Allman, a Yahoo spokeswoman.
Mr. Vassallo, the Microsoft executive, said his company’s decision to conform to European requests on data retention was meant to avert the possibility of new regulation.
“It is possible that the European Union will take a position to regulate this one way or the other,” Mr. Vassallo said. “That would need a high level of responsibility from industry.”
Carmelo Fontana carmelo_fontana@yahoo.it
_______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa
-- Andrea Glorioso || http://people.digitalpolicy.it/sama/cv/ M: +32-488-409-055 F: +39-051-930-31-133 * Le opinioni espresse in questa mail sono del tutto personali * * The opinions expressed here are absolutely personal * "Constitutions represent the deliberate judgment of the people as to the provisions and restraints which [...] will secure to each citizen the greatest liberty and utmost protection. They are rules proscribed by Philip sober to control Philip drunk." David J. Brewer (1893) An Independent Judiciary as the Salvation of the Nation
Beh, c'e' il Safe Harbor. io penso che le norme sulla privacy ed il safe harbor diverranno nel 2010 un argomento chiave delle discussioni tra USA ed Europa per quanto riguarda l'online, andando a toccare proprio gl iinteressi degli oepratori economici. Anche i politici che fino a ieri criticavano le norme sulla privacy si "convertiranno", non per convinzione ma per utilita', e contribuiranno a miglioraer l apercezione sui consumatori. IMHO... Andrea Glorioso wrote:
Caro Carmelo, cari tutti,
credo che occorra considerare con attenzione il contesto, come del resto suggerisci anche tu alla fine della tua email.
Il periodo massimo di 6 mesi a cui si riferisce la notizia e` una richiesta del gruppo di lavoro Articolo 29 (WP29), contenuta nella loro opinione 1/2008 (disponibile presso http://ec.europa.eu/justice_home/fsj/privacy/workinggroup/wpdocs/2008_en.htm).
Le opinioni del WP29 non sono generalmente vincolanti per gli Stati Membri o gli operatori economici dell'Unione Europea, ancor meno per quegli operatori che - a torto o a ragione - sostengono che il processamento dei dati personali avviene al di fuori del territorio dell'Unione Europea.
(Sto semplificando molto, il problema giurisdizionale della Direttiva 95/54/EC e` complesso ed e` uno dei nodi che si affronteranno nel corso della relativa revisione - ma l'opinione 1/2008 contiene una discussione molto interessante anche su questo punto.)
Dunque, in assenza di norme vincolanti, la decisione di un operatore economico di agire in una direzione o in un'altra e` giocoforza determinata dalle pressioni di mercato. In questo senso, l'immagine di un'azienda percepita dai consumatori gioca, non solo in questo settore, un ruolo importantissimo.
Le norme europee sulla protezione dei dati personali sono sicuramente complesse, ma non piu` che in altri settori. Il problema, alla fine, continua ad essere la discrasia tra norme "locali" e comportamenti "globali".
Ciao,
Andrea
On Wed, Jan 20, 2010 at 11:35:23AM +0100, Carmelo Fontana wrote:
Oggi sul NYT ho trovato la notizia che Bing (MS) ha dichiarato che rispettera' la normativa sulla protezione della privacy.
http://www.nytimes.com/2010/01/20/technology/companies/20search.html?ref=bus...
A prescindere da ogni considerazione sul merito, mi pare un dato interessante quanto l'opinione pubblica sia "intellettualmente assuefatta" alla non-compliance con la disciplina sulla privacy (e non solo). Tanto che la dichiarazione che MS rispettera' la legge e' una notizia...
Ma ancora NYT riporta: “Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequencesâ€
La regolamentazione sulla privacy sembra essere considerata un inconveniente di cui e' tuttavia necessario prendersi cura per migliorare la propria immagine... Che ne e' stato dell'importanza di rispettare la legge in quanto tale?
Allora, vale la pena di chiedersi se questa situazione sia dovuta a: i) una normativa troppo severa/complicata/inapplicabile e quindi incompatibile con l'ordinario svolgimento delle attivita', oppure ii) un sistema di enforcement inefficace o comunque insufficiente. O forse a entrambe le cose.
C.
Microsoft Puts a Time Limit on Bing Data By KEVIN J. O’BRIEN Published: January 19, 2010 Bowing to pressure in Europe, Microsoft said Tuesday that it would comply with regulators and discard all data collected on users of its Bing search engine after six months.
John Vassallo, a Microsoft vice president and associate general counsel, said the company would introduce the change over the next 18 months. The company aims to satisfy a European advisory group that had been critical of how search engines collect and retain data on individuals for advertising purposes.
The concession, relatively painless for Microsoft given its tiny share of the global search market — just 3 percent — is yet another example of an American technology giant’s changing its way of doing business to suit stricter European concepts of antitrust and privacy laws.
The European Commission in December dropped an antitrust case against Microsoft after the software maker took the unprecedented step of agreeing to distribute the browsers of its competitors through its Windows operating system.
Unlike the agreement on browsers, which will be confined to consumers in Europe, Microsoft’s decision to discard data will affect users around the world, including in the United States.
Hendrik Speck, a professor of computer science at the University of Applied Sciences in Kaiserslautern, Germany, said competitors would probably follow Microsoft’s decision because consumers were increasingly concerned about online privacy amid widespread data theft and rising use of social networks.
“Google and other engines are starting to realize that consumers around the world are placing an increasing value on privacy and that can have business consequences,†Professor Speck said.
Europe is the world’s largest market for Internet searches, accounting for 32 percent of online queries, according to comScore, a market research company. The Asia-Pacific region had 31 percent of searches and North America 22 percent, according a comScore report in July. Google has a 67 percent share of the global search market, according to comScore, but a more than 80 percent share in Europe, where Microsoft has just 2 percent of the market.
In 2008, a panel of national privacy regulators from each European Union country asked Microsoft, Google and Yahoo to eliminate all online query data, like a computer’s unique identification number, location and the text typed into search fields, after six months.
The panel, known as the Article 29 Working Group, held a hearing with representatives of the search engine companies last February, and has given each until the end of January to respond.
Like other search engines, Bing had been keeping user data for more than 18 months. Last year, Microsoft said it would change its policy to make an individual’s Internet protocol, or I.P., address anonymous after six months if its major competitors did also.
In its announcement Tuesday, Microsoft said it would delete I.P. addresses after six months but would retain cookies and other session identifiers — software that recognizes a returning computer — for 18 months. Once it deletes an I.P. address, Microsoft said the link between data and a specific computer became effectively untraceable.
In a statement, Google gave no indication it would accept the European Union’s demands. The company’s global privacy counsel, Peter Fleischer, reaffirmed Google’s policy of making user data anonymous after nine months, saying it struck the proper balance between ensuring user privacy and refining the functioning of its leading search engine.
“Data from our search queries represents a crucial arm in our battle to protect the security of our services against hacks and fraud,†Mr. Fleischer said. “It also represents a critical element allowing us to help users by innovating and improving the quality of our searches.â€
Yahoo, which had been deleting only a portion of individual I.P. addresses, said it would now delete the entire address after 90 days and make anonymous the log of a user’s activities. The policy would not apply to requests from law enforcement agencies that data be retained, said Amber Allman, a Yahoo spokeswoman.
Mr. Vassallo, the Microsoft executive, said his company’s decision to conform to European requests on data retention was meant to avert the possibility of new regulation.
“It is possible that the European Union will take a position to regulate this one way or the other,†Mr. Vassallo said. “That would need a high level of responsibility from industry.â€
Carmelo Fontana carmelo_fontana@yahoo.it
_______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa
-- blog.quintarelli.it www.eximia.it www.reeplay.it
On Wed, Jan 20, 2010 at 12:46:57PM +0100, Stefano Quintarelli wrote:
Beh, c'e' il Safe Harbor.
Il "Safe Harbor", cosi` come le "Binding Corporate Rules", sono dei meccanismi sicuramente utili per cercare di ovviare al problema dei meccanismi "globali/locali" a cui ho accennato nella mia email. Da quel che conosco e capisco io del primo meccanismo, pero`, l'effettiva durata di conservazione dei dati non e` oggetto della "self-certification" di Google Inc. pressa la FTC statunitense. Questo, oltre al fatto che l'opinione del WP29 non e` vincolante, rende le decisioni di Google, Microsoft o chi altri interpretabili piu` sotto la luce delle dinamiche di mercato (e della percezione dei consumatori) che non di una mera applicazione del diritto vigente.
io penso che le norme sulla privacy ed il safe harbor diverranno nel 2010 un argomento chiave delle discussioni tra USA ed Europa per quanto riguarda l'online, andando a toccare proprio gl iinteressi degli oepratori economici. Anche i politici che fino a ieri criticavano le norme sulla privacy si "convertiranno", non per convinzione ma per utilita', e contribuiranno a miglioraer l apercezione sui consumatori.
Sottoscrivo. Ricordo anche che l'entrata in vigore del Trattato di Lisbona introduce una nuova base legale per quanto riguarda la protezione della privacy e dei dati personali (art. 16 del Trattato dell'Unione Europea e Carta dei Diritti Fondamentali dell'Unione Europea) il che certamente comportera` un maggior attivismo, a livello europeo, sull'argomento - il che a sua volta avra` senz'altro degli effetti di non poco conto sulle relazione tra EU, USA e altri stati. Ciao! -- Andrea Glorioso || http://people.digitalpolicy.it/sama/cv/ M: +32-488-409-055 F: +39-051-930-31-133 * Le opinioni espresse in questa mail sono del tutto personali * * The opinions expressed here are absolutely personal * "Constitutions represent the deliberate judgment of the people as to the provisions and restraints which [...] will secure to each citizen the greatest liberty and utmost protection. They are rules proscribed by Philip sober to control Philip drunk." David J. Brewer (1893) An Independent Judiciary as the Salvation of the Nation
Se posso dire, il problema vero è che, se ci si attiene al dato normativo, alcuni dei più noti servizi del web 2.0 sono necessariamente "fuorilegge". Penso ovviamente al problema dei dati raccolti presso i terzi ovvero ai trattamenti dei contenuti degli utenti. La dichiarazione di MS mi pare una sortita da public policy su di un tema certamente importante (la data retentions) ma non così centrale. Poiché poi la normativa a tutela dei dati inizia ad esser utilizzata come testa di ponte per tratteggiare posizioni di garanzia degli ISP sui contenuti (vedi caso google-vividown), in contrasto con la 70/03, e nel contempo i dati degli utenti sono il conio con cui si pagano i servizi "gratuiti" è evidente che in futuro ne vedremo delle belle. -----Messaggio originale----- Da: nexa-bounces@server-nexa.polito.it [mailto:nexa-bounces@server-nexa.polito.it] Per conto di Andrea Glorioso Inviato: mercoledì 20 gennaio 2010 13.03 A: Stefano Quintarelli Cc: nexa@server-nexa.polito.it Oggetto: Re: [nexa] Microsoft said that it would comply with regulators. On Wed, Jan 20, 2010 at 12:46:57PM +0100, Stefano Quintarelli wrote:
Beh, c'e' il Safe Harbor.
Il "Safe Harbor", cosi` come le "Binding Corporate Rules", sono dei meccanismi sicuramente utili per cercare di ovviare al problema dei meccanismi "globali/locali" a cui ho accennato nella mia email. Da quel che conosco e capisco io del primo meccanismo, pero`, l'effettiva durata di conservazione dei dati non e` oggetto della "self-certification" di Google Inc. pressa la FTC statunitense. Questo, oltre al fatto che l'opinione del WP29 non e` vincolante, rende le decisioni di Google, Microsoft o chi altri interpretabili piu` sotto la luce delle dinamiche di mercato (e della percezione dei consumatori) che non di una mera applicazione del diritto vigente.
io penso che le norme sulla privacy ed il safe harbor diverranno nel 2010 un argomento chiave delle discussioni tra USA ed Europa per quanto riguarda l'online, andando a toccare proprio gl iinteressi degli oepratori economici. Anche i politici che fino a ieri criticavano le norme sulla privacy si "convertiranno", non per convinzione ma per utilita', e contribuiranno a miglioraer l apercezione sui consumatori.
Sottoscrivo. Ricordo anche che l'entrata in vigore del Trattato di Lisbona introduce una nuova base legale per quanto riguarda la protezione della privacy e dei dati personali (art. 16 del Trattato dell'Unione Europea e Carta dei Diritti Fondamentali dell'Unione Europea) il che certamente comportera` un maggior attivismo, a livello europeo, sull'argomento - il che a sua volta avra` senz'altro degli effetti di non poco conto sulle relazione tra EU, USA e altri stati. Ciao! -- Andrea Glorioso || http://people.digitalpolicy.it/sama/cv/ M: +32-488-409-055 F: +39-051-930-31-133 * Le opinioni espresse in questa mail sono del tutto personali * * The opinions expressed here are absolutely personal * "Constitutions represent the deliberate judgment of the people as to the provisions and restraints which [...] will secure to each citizen the greatest liberty and utmost protection. They are rules proscribed by Philip sober to control Philip drunk." David J. Brewer (1893) An Independent Judiciary as the Salvation of the Nation _______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa
participants (4)
-
Andrea Glorioso -
Blengino -
Carmelo Fontana -
Stefano Quintarelli