• eBay Privacy and Government Relations Participate in Geolocation Day at the California State Capitol

    Mar 29, 2016

    The eBay Privacy and Government Relations Teams participated in the Internet Association's "Geolocation" Lobby Day in Sacramento along with GR and privacy experts from Facebook, Google, Yahoo, Amazon, Lyft, and Pandora. The group spent time with 11 key legislators educating them on existing and emerging technologies, legitimate capture of geolocation data, security of that data, and to discuss policy implications. There is active legislation in California that aims to define "geolocation" in statute, establishing a precedent among the 50 states. These educational conversations have been valuable in informing bill language and understanding the various uses of geolocation data. eBay was a sponsor of the reception held that evening to award Assemblymen Low and Chiu as Internet Association’s ‘2015 Internet Champions’. The reception allowed the opportunity to connect with additional legislators that were not able to attend the daytime geolocation discussions.

  • eBay Responds to Safe Harbor Ruling

    Feb 5, 2016

    We take the privacy and safety of the hundreds of millions of people who use eBay very seriously. Since 2009, eBay has transferred data globally within the eBay group on the basis of “Binding Corporate Rules” (BCRs) which have been officially approved by EU Data Protection Authorities. This means we already treat the personal information of our customers everywhere within the eBay Inc. corporate family according to approved European Union privacy standards. We are analyzing these latest developments and we will continue to do so as the framework moves towards implementation. Privacy is a complex area and eBay broadly welcomes all efforts to strengthen privacy commitments and standards.  To read the European Commission press release on Safe Harbor, click (here).

  • October is National Cyber Security Month

    Sep 23, 2015

    President Obama has designated October as National Cyber Security Awareness Month. The goal of National Cyber Security Awareness Month is to increase awareness about cybersecurity and prepare the nation in the event of a cyber attack. To read more and to view the themes and keystone events, visit

  • eBay Employee Wins Password Cracking Contest, Provides Tips for a Strong Password

    Sep 23, 2015

    Password hackers from around the world gathered together at the DEFCON information security conference in August to compete in KoreLogic’s annual “Crack Me If You Can” password cracking contest. 25 teams from all over the globe tried to crack as many passwords as possible in a 48 hour time period. Team Hashcat, which included eBay’s own Eric Milam, came out victorious and claimed the top prize with 46,751 cracks vs second place finisher, CynoSure Prime, which had 38,609 cracks.


    • Passwords between 8-10 characters are extremely weak and can be easily cracked by a professional. Hacking pros were asked to crack two random passwords and here are the results:
      • Password2015! – only took 36 seconds to crack.
      • eBayis#1 – took 1 minute and 56 seconds.
    • Pass phrases are better and stronger than passwords. While they are longer, they are memorable and can be easy to type. Pass phrases are just sequences of words, a simple sentence that you can easily remember. Here are some examples of strong pass phrases that are nearly impossible to crack:
      • Zombies ate my password!
      • U can,t krack this password? haha!

    Security is everyone’s responsibility, and having a strong password is just one way to make sure you are doing your part to keep your information safe.

  • eBay Inc. To Ask eBay Users To Change Passwords

    Jun 18, 2014

    San Jose, CA (May 21, 2014) — eBay Inc. (Nasdaq: EBAY) today said it is asking eBay users to change their passwords because of a cyberattack that compromised a database containing encrypted passwords and other non-financial data. After conducting extensive tests on its networks, the company said it has no evidence of the compromise resulting in unauthorized activity for eBay users, and no evidence of any unauthorized access to financial or credit card information, which is stored separately in encrypted formats. However, changing passwords is a best practice and will help enhance security for eBay users.

    Information security and customer data protection are of paramount importance to eBay Inc., and eBay regrets any inconvenience or concern that this password reset may cause our customers. We know our customers trust us with their information, and we take seriously our commitment to maintaining a safe, secure and trusted global marketplace.

    For more information, please visit

  • eBay Chief talks privacy with the Wall Street Journal

    Feb 25, 2014

    John Donahoe, eBay's CEO, spoke with the Wall Street Journal recently about our business and the business of privacy in the new economy.  John discussed our open privacy practices and the need for a dialogue between Business and Government to ensure that privacy laws are done proactively in a way that enables the Internet's creativity, rather than in reaction to an event that could stifle innovation.  In addition, John mentioned the recent Ponemon study that put eBay in the top 10 respected companies for privacy.  eBay has achieved this honor for 7 years in a row.

    Watch the video of John's dialogue at the Wall Street Jounal's website.

  • eBay Inc. Releases Global Data Privacy Report

    Nov 5, 2013

    eBay Inc. released its first annual global data privacy report as a 2012-2013 document.  The report, which features a preface by Dr. Larry Ponemon discussing eBay's privacy accomplishments in the Ponemon annual privacy survey, is meant to convey eBay's thought leadership in the privacy arena.  The document transparently discusses the company's rights servicing, the topics of frequent privacy discussions, and account closure requests in the EU.  These metrics are being developed for North American and Asia for future report releases.

    Download the eBay Inc. 2012-2013 Privacy & Data Protection Annual Report.  To request a paper copy of the report please contact us.

  • eBay Inc. Makes Ponemon Study for Most Trusted Companies for Privacy

    May 15, 2013

    The Ponemon Institute LLC released its rankings of the most trusted companies for privacy, and eBay once again found itself listed in the top 10.  The year ending December 2012 marked the 7th year in a row that eBay was honored with this distinction.  The Ponemon Institute contacted thousands of consumers to name the companies that are the most committed to protecting their personal data.   According to the study,  78% of respondents continue to perceive privacy and protection of their information as important in trusting consumer brands, with an upward trend over the course of the Institute's examination.  For more information you can access the Ponemon Study Here or visit the Ponemon Institute Website Here.

  • Amendment submitted to relax Netherlands' Cookie Law

    Nov 29, 2012

    Last week Members of Parliament from the D66 (Liberal democratic party) submitted a proposal in Parliament to amend the Netherlands’ strict cookie laws.


    The core of the proposal is that first-party tracking cookies would require an "informed consent" approach, instead of the currently required explicit opt-in. The condition is that a website’s general privacy policy or cookie policy must state the use of first-party tracking cookies, that the data collected can only be used in aggregate form, and that there is a possibility to 'opt-out' (possibly through the provider of the analytics service). 

    This amendment would may of the cookie implementation problems in the Netherlands. The amendment would also imply a large step towards aligning with other EU countries’ cookie laws.


    Earlier this week (11/27) Minister Kamp (Economic Affairs) indicated he will respond to the proposal before the end of the year. Several stakeholders are preparing a joint response to the Ministry, as their objective is to ensure that OPTA does not proceed with enforcement of the cookie laws starting in January 2013 while the interpretation of the law is under political discussion.

    You can read more about the proposal here:

    (in English)

    (in Dutch)


  • eBay’s Global Privacy Leader Talks Privacy and Mobile Innovation with Congress

    Jun 19, 2012

    June 19, 2012 – Today, Scott Shipman, eBay’s Global Privacy Leader and Associate General Counsel, traveled to Washington, D.C. to testify before the House Judiciary Subcommittee on Intellectual Property, Competition and the Internet. Scott was invited to participate in the hearing to discuss the latest innovations and trends in global commerce and to discuss what eBay Inc. is doing to protect consumers’ privacy. You can read Scott’s full testimony here. Below are Scott’s thoughts following the hearing:

    First, I’d like to commend Chairman Goodlatte, Ranking Member Watt, and the other members of the Subcommittee for holding this important hearing.  You don’t have to be in the privacy field to know how important this issue is– privacy matters to every one of us.

    The Subcommittee has taken a smart approach to these challenging issues by inviting other privacy leaders, such as TRUSTe, ACT, and Professor James Grimmelmann, to provide experience and insight into how the privacy landscape and consumer expectations are rapidly evolving. Gathering insight from a variety of voices will help ensure that public policy strikes that delicate, yet critical balance between strong consumer protections and innovation.  

    At eBay Inc., privacy is part of our corporate DNA. We recognize that the success of our company has been built on a foundation of consumer trust and confidence. And one of the main ways we work to earn and maintain consumer trust is by being transparent, responsible stewards of our customer’s personal information.

    We have made privacy protections a fundamental building block of our products and services. The very foundation of PayPal is privacy and security.  PayPal allows consumers to make online payments safely and securely without exposing their personal information. Today, PayPal continues to offer consumers and merchants creative payment solutions that help protect their sensitive data – whether it’s online or on their phone.

    In addition, the prevalence of mobile technologies has exploded over the past few years and the Subcommittee was very interested in learning about how eBay Inc. is approaching privacy on this technological frontier.

    eBay users know that we are doing some really cool and exciting things in the mobile space. We have rolled out new products and services that enable our users to buy, sell and pay on their mobile devices.  But more than just offering cutting-edge services, we are building mobile applications that offer the same levels of transparency, choice, and privacy protection as our legacy Internet platforms.

    A great example is WHERE. WHERE is a mobile app that provides personalized, hyper-local recommendations, offers, and deals to millions of mobile consumers. More than 120,000 retailers, brands and small merchants use these services daily to reach new audiences and deliver real-time foot traffic to their doorstep. And for consumers, WHERE helps users discover, save, and share their favorite places by putting the best local information at their fingertips and offering great deals from nearby businesses.

    This is exciting technology that is delivering value to consumers and merchants. But we know how important it is to make sure that consumers have the choice to decide how and when their information is being stored and used. That is why eBay Inc. has made it a standard practice that all consumers must opt-in to turn on geo-location for all of eBay Inc. mobile applications.

    Again, I appreciate the opportunity to participate in this important hearing.  eBay Inc. looks forward to continuing to work with the Congress and the Administration on privacy initiatives. For more information regarding our privacy efforts, please check out eBay’s Privacy Center or email