A new French law requires a variety of internet firms to keep data on users – names, addresses, telephone numbers, and passwords – for up to a year. And, if requested, turn it all over to authorities.