The new policystates that Yahoo will share information to investigatecircumstances involving illegal activity such asfraud, violations of its terms of service agreement,and the use of its service for potential threats. Therevision also said Yahoo will transfer userinformation if it is acquired by another company andabide by the acquiring company's privacy policy.
The changes were sparked by economics and the ongoing trend among companies to comply with investigative bodies following the Sept. 11 terrorist attacks.
"It's the swinging of the pendulum," said Evan Hendricks, editor of privacy newsletter Privacy Times. "It has swung very much toward making it easier to disclose information."
Stating a policy for user data in the event it is acquired could also clear a barrier for Yahoo's future. If the company's policy prohibited it from sharing user data with anyone, Yahoo users could pose a legal challenge to any transfer of user data to a new owner, Hendricks added.
Indeed, Internet companies that have explicitly barred sharing user data with any third parties have stumbled into legal problems when entering into a merger or acquisition. Last summer, Fry's Electronics' proposed acquisition of Egghead.com hit a stumbling block because of this privacy barrier. Fry's eventually cancelled its $10 million bid.
Yahoo's privacy was previously separated into threecategories for children, financial information and itsoverall terms of use on its site. Srinjia Srinivasan,vice president and editor in chief at Yahoo, said thechanges were made mainly to consolidate the three policiesinto one, and to elaborate certain cases where personaldata would be used.
"Fundamentally our approach remains unchanged,"Srinivasan said. "It's always been a mantra of notice andchoice. We're always looking to make this complexissue as clear as possible."
She added that Yahoo worked closely with Truste, whichvouches for sound Internet privacy practices, to craftits changes.
Yahoo will begin e-mailing a notice of the changesbeginning Thursday morning to all people registered onYahoo.com. Given the size of this population, thee-mailings will not be completed for a few weeks.International sites will not be included.
In addition to the policy changes, Yahoo revisedthe way it offers information about its own products.
Yahoo users will now automatically have their marketing preferences set to accept updates from a smattering of Yahoo's businesses. Previously, userswere offered one option to either accept or reject product notices when first registering on the site.
Users will have to click "no" to opt out of receiving e-mails from a selection of 13 Yahoo products, ranging from job listings to new media products to inclusion in Yahoo's user surveys, among other things. The page also has an option for users to opt in to the Yahoo Delivers service, which sends product pitches from third parties.
Yahoo users will have 60 days upon receiving notice toopt out of these promotions.