PRISM

[Clodfobble]

Tell users about government data requests. To earn a star in this category, Internet companies must promise to tell users when the government seeks their data unless prohibited by law. This gives users a chance to defend themselves against overreaching government demands for their data.

It's a cool report, but I have to admit I'm not impressed with the stringency of this particular criteria. It's the only one that doesn't actually require the company to do anything, and gives them a built-in excuse if they do break it--how many places/situations is this sort of thing prohibited by law? Who knows? It's like, I promise I will totally murder that guy for you, except where prohibited by law.