A document purported to be Yahoo Inc.'s Compliance Guide for Law Enforcement was released on Dec. 5 by Wikileaks, an online purveyor of leaked information. The 17-page guide outlines what is ostensibly Yahoo's information retention and disclosure policies and procedures for law enforcement authorities. I can't independently confirm the authenticity of the document, because Yahoo has failed to respond to questions I submitted to the company on Saturday.
What I can say is that the document appears to be authentic, and that if it is, Yahoo doesn't want you to see it. The document states specifically that "it is not meant to be distributed to individuals or organizations that are not law enforcement entities, including Yahoo! customers, consumers, or civil litigants."
Now, let me back up for a minute and state my strong conviction that Yahoo is to be commended for working cooperatively and proactively with law enforcement authorities. It's clear that user information held by Yahoo can be invaluable in aiding the investigation of criminal activity, including the exploitation of minors, so Yahoo should do everything it's legally able to do to assist law enforcement officials in those investigations.
The problem I have is the senseless lack of transparency. There is absolutely no legitimate reason for the information in this document to be withheld from the general public, or for Yahoo to hide what it's able and prepared to do to assist in criminal investigations. The customer has every right to know exactly what Yahoo's policies and capabilities are in this regard, so that he can weigh that information in his decision to sign up for Yahoo services.
That's fine, but exactly what information is Yahoo able to provide to law enforcement authorities? It's not too much of a stretch to surmise that Yahoo officials don't want the answer to be publicly available because of the concern that it would scare off too many customers. That's just not a good enough reason for it to be kept under wraps.
The following list, extracted directly from the document posted by Wikileaks, outlines the information that Yahoo is able to provide:
Yahoo! Mail (including e-mail associated with specific properties such as Personals, Small Business, Domains, and Flickr)
Yahoo! GeoCities, Domains, Web-hosting, and Stores
Regardless of the authenticity of this document, Yahoo is obligated to be forthcoming and transparent in making its users aware of exactly what information it retains and is prepared to share with government authorities. And it's obligated to explain why that's not happening.