Thursday

22nd Oct 2020

Search engine activities threat to privacy, says EU report

Search engines should not hold on to personal data at the end of six months due to privacy concerns, the European Commission's data protection watchdog has recommended in a report.

In a draft document issued following an extensive inquiry into data retention, the commission's advisory body on data protection said: "Search engine providers must delete or irreversibly anonymise personal data once they no longer serve the specified and legitimate purpose they were collected for."

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

"The consent of the user must be sought for all planned cross-relation of user data, user profile enrichment exercises," the document further reads, noting that collectors have "insufficiently explained" to their users what they are retaining data for.

Furthermore, the report calls for the consent of the user to be sought "for all planned cross-relation of user data and user profile enrichment exercises" - in other words, joining up bits of user data to deliver other services or to develop a profile of the web-surfer.

The group was established to advise the European Commission and make recommendations on data protection. It is unusual for the commission to not heed its advice – although any attempt to do so is set to be sharply opposed by the major search engine providers, such as Google and Yahoo, who retain such data for up to 18 months.

Search engines collect information from every search made using their service, as well as the address of the computer – the 'IP address' - that has made a particular search. This combined data, or search history, is a rich mine of user information, which can be tracked using a parcel of text called a 'cookie' and is sometimes combined with other data from third parties.

Cookies deployed by search engines generally contain information about the user's operating system and browser, and a unique identification number for each user account, permitting a more accurate identification of the user than the IP address alone.

The quality of service

Google, the Internet's dominant search engine, quickly responded to the recommendation on its public policy blog, arguing that data retention allows it to improve search results and prevent fraud.

"We believe that data retention requirements have to take into account the need to provide quality products and services for users, such as accurate search results, as well as system security and integrity concerns," reads a blog post, filed by Peter Fleischer, Google's global privacy counsel.

"We have recently discussed some of the many ways that using this data helps improve users' experience, from making our products safe, to preventing fraud, to building language models to improve search results.

The US-based Electronic Privacy Information Centre, which urged the European Parliament in January to protect the privacy of search histories, welcomed the report, in particular that the "opinion further holds that European privacy laws generally apply to search engines 'even when their headquarters are outside [Europe]'"

Daniel Brandt, a 54-year-old webmaster from San Antonio in the United States and one of the company's biggest privacy critics, discovered in 2002 that Google's cookies had an expiration date of 2038. In 2007, the company announced that they would now expire after two years, although the cookie is renewed every time a user uses a Google service.

Mr Brandt was also positive about the announcement: "The EU is way ahead of the US in terms of data retention and privacy," he told the EUobserver.

"This is a move in the right direction, but even six months is too long to retain user data. Thirty days should be sufficient for any service, even targeted advertising."

Vast amounts of information

The amount of information search engines know about us is vast. In 2006, AOL, an internet service provider, accidentally published a sample of queries and results of some 650,000 users over a three-month period.

Although AOL had replaced the names of the users by a number, journalists found out these results could often be traced to individual users, not only because of so-called vanity searches (people searching for information about themselves) but also by combining several queries from a single user .

Mr Brandt worries that such valuable data is simply too important or too profitable not to sell it or hand it over to state agencies such as the police or security services.

"Search engines should be treated like any other public utility such as the telephone company or electric company – highly regulated."

Ultimately, Mr Brandt believes that like libraries, search engines should be publicly run.

"Public libraries – and Google is the modern equivalent – don't keep personal data based on all the books you borrow and then sell it to advertisers."

Feature

Nine lines that changed history - at least on the internet

Google has removed 800,000 search results across the EU following complaints from citizens, without the public knowing what has been removed, why it was removed or who complained. We revisit the case that rewrote history online.

Pressure mounts on EU cloud deal as deadline looms

The European Commission is under pressure to keep to its self-imposed September deadline to publish an EU cloud computing strategy, as new evidence revealed widespread public confusion about it.

News in Brief

  1. Commission to press Croatia on migrant 'abuse' at border
  2. Belarus opposition awarded 2020 Sakharov Prize
  3. Belgium's foreign minister in intensive care for Covid-19
  4. MEPs restrict CAP funding for bullfighting
  5. Coronavirus: Liège is 'the Lombardy of the second wave'
  6. UK to keep out EU nationals with criminal past
  7. Report: EU to restrict travel from Canada, Tunisia, Georgia
  8. Pope Francis supports same-sex civil unions

Opinion

All eyes on EU court for decision on religious slaughter

The European Court of Justice is currently facing a major question: can religious freedom coexist with animal welfare? The decision of whether religious slaughter can continue is expected in a matter of weeks.

Investigation

EU money used by neo-Nazi to promote Holocaust denial

A prominent Holocaust-denier has made the cover of an EU-funded newsletter, which was published by an avowed German neo-Nazi with a lengthy criminal record. The lack of clear labelling of the MEP behind it violates European Parliament rules.

Stakeholders' Highlights

  1. UNESDAMaking healthier diets the easy choice
  2. Nordic Council of MinistersUN Secretary General to meet with Nordic Council on COVID-19
  3. UNESDAWell-designed Deposit Return Schemes can help reach Single-Use Plastics Directive targets
  4. Nordic Council of MinistersNordic Council meets Belarusian opposition leader Svetlana Tichanovskaja
  5. Nordic Council of MinistersNordic Region to invest DKK 250 million in green digitalised business sector
  6. UNESDAReducing packaging waste – a huge opportunity for circularity

Latest News

  1. Nato and EU silent on Turkey, despite Armenia's appeal
  2. EU tells UK to decide on Brexit as deal 'within reach'
  3. EU farming deal attacked by Green groups
  4. France vows tough retaliation for teacher's murder
  5. All eyes on EU court for decision on religious slaughter
  6. 'Big majority' of citizens want EU funds linked to rule of law
  7. EU declares war on Malta and Cyprus passport sales
  8. EU Commission's Libya stance undercut by internal report

Join EUobserver

Support quality EU news

Join us