Two Words on Why the FTC’s Self-Reg Approach is Wrong: Financial Meltdown

It has been deregulation, including forms of self-regulation, which led to the current financial crisis.  Regulators and most policymakers looked the other way, while many from the investment community created a Ponzi scheme bigger than Bernie Madoff’s.  The online marketing of mortgages and loans played a role in the `borrow’ and `buy’ culture which contributed to the economic mess we are in.

It’s now more important than ever that online marketing, including the structure of data collection and privacy, be regulated.  Congress has to act to make sure consumers understand the loans and other financial products they are being offered interactively online.  The financial crisis, noted Google, is actually fostering the growth of online marketing (as consumers look for less expensive ways to shop).   As Google recently explained to advertisers, the “slowdown is actually accelerating the use of consumer online shopping for goods and services.”  The “mass market is now online,” they noted.

Consumers need to completely understand and fully control how data is collected and used when they seek financial services.  The behavioral targeting system involved with mortgage loan sales, we believe, is totally unknown to consumers (and sadly, regulators).  That’s why my group and others criticized last week’s FTC report.  It’s self-regulatory approach is based on a failed policy (from the people on both sides of the aisle who got us into this mess).  We can have both regulation/fair rules and make the commercial market prosper.  It’s time for the online ad industry to support a regulatory policy that will help make our financial future more secure.

Baby Steps for Online Privacy: Why the FTC Self-Regulatory Principles For Online Behavioral Advertising Fails to Protect the Public

Statement of Jeff Chester, Exec. Director, Center for Digital Democracy:

The Federal Trade Commission is supposed to serve as the nation’s leading consumer protection agency.  But for too long it has buried its mandate in the `digital’ sand, as far as ensuring U.S. consumer privacy is protected online.    The commission embraced a narrow intellectual framework as it examined online marketing and data collection for this proceeding.  Since 2001, the Bush FTC has made industry self-regulation for privacy and online marketing the only acceptable approach when considering any policy safeguards (although the Clinton FTC was also inadequate in this regard as well).  Consequently, FTC staff—placed in a sort of intellectual straitjacket—was hampered in their efforts to propose meaningful safeguards.

Advertisers and marketers have developed an array of sophisticated and ever-evolving data collection and profiling applications, honed from the latest developments in such fields as semantics, artificial intelligence, auction theory, social network analysis, data-mining, and statistical modeling.  Unknown to many members of the public, a vast commercial surveillance system is at the core of most search engines, online video channels, videogames, mobile services and social networks.  We are being digitally shadowed across the online medium, our actions monitored and analyzed.

Behavioral targeting (BT), the online marketing technique that analyzes how an individual user acts online so they can be sent more precise marketing messages, is just one tool in the interactive advertisers’ arsenal.  Today, we are witnessing a dramatic growth in the capabilities of marketers to track and assess our activities and communication habits on the Internet.  Social media monitoring, so-called “rich-media” immersive marketing, new forms of viral and virtual advertising and product placement, and a renewed interest (and growing investment in) neuromarketing, all contribute to the panoply of approaches that also includes BT.  Behavioral targeting itself has also grown more complex.  That modest little “cookie” data file on our browsers, which created the potential for behavioral ads, now permits a more diverse set of approaches for delivering targeted advertising.

We don’t believe that the FTC has sufficiently analyzed the current state of interactive marketing and data collection.  Otherwise, it would have been able to articulate a better definition of behavioral targeting that would illustrate why legislative safeguards are now required.  It should have not exempted “First Party” sites from the Principles; users need to know and approve what kinds of data collection for targeting are being done at that specific online location.

The commission should have created specific policies for so-called sensitive data, especially in the financial, health, and children/adolescent area.  By urging a conversation between industry and consumer groups to “develop more specific standards,” the commission has effectively and needlessly delayed the enactment of meaningful safeguards.

On the positive side, the FTC has finally recognized that given today’s contemporary marketing practices, the distinction between so-called personally identifiable information (PII) and non-PII is no longer relevant.  The commission is finally catching up with the work of the Article 29 Working Party in the EU (the organization of privacy commissioners from member states), which has made significant advances in this area.

We acknowledge that many on the FTC staff worked diligently to develop these principles.  We personally thank them for their commitment to the public interest.  Both Commissioners Leibowitz and Harbour played especially critical roles by supporting a serious examination of these issues.  We urge everyone to review their separate statements issued today.  Today’s release of the privacy principles continues the conversation.  But meaningful action is required.  We cannot leave the American public—now pressed by all manner of financial and other pressures—to remain vulnerable to the data collection and targeting lures of interactive marketing.

FTC’s Behavioral Ad Principles–the last act of the Bush Administration? Why is the Obama White House Allowing the FTC To Remain Under the Leadership Appointed by Pres. Bush?

In a few hours, approximately between 10-11 am eastern, the FTC is expected to release its final “Online Behavioral Advertising Principles.” Originally released for comment in December 2007, the principles are a sort of Valentine’s Day present to the online ad industry from the (supposedly departed) Bush Administration.  From what we know, the FTC principles support self-regulation.  Online marketers will be told they should behave better–and here are suggestions.  It’s like a teacher telling a misbehaving student–‘behave better, dear,’ or else we will have to tell your parent (in this case, the guardian being potential congressional action).

My CDD urged Commissioners Harbour and Leibowitz to issue separate statements on the principles, and call for tougher requirements—especially in the area of so-called sensitive information.  This would include data connected to our financial and health related online activities (think mortgage and loan applications or queries for prescription drugs).  CDD and a coalition of groups also formally asked the commission to impose serious privacy safeguards for both children and adolescents.

But these principles were crafted within the narrow confines of the Bush Administration philosophy prevailing at the FTC.  Only self-regulation is permitted.  Consequently, such an approach likely means these rules leave the online data collection, profiling and targeted marketing system which comprise behavioral marketing off the privacy protection hook.

But one question looms at the moment.  Why has the new Obama administration allowed the FTC to remain under the leadership of Bush-appointee William E. Kovacic? The principles being issued today, in fact, reflect the “old” FTC, not one run under the philosophy of President Obama.  Why is the Obama White House failing to ensure a change of leadership at the FTC?  The agency is responsible for overseeing a huge portion of the economy, including critical financial issues.  It’s also supposed to be the leading agency on consumer protection issues.   The Obama White House should have–by now-found someone who would led the FTC, so it can better protect the public.

The principles being released today were only made possible because of the Bush FTC give-away to Google, when it approved its takeover of online ad giant DoubleClick.  CDD, the Electronic Privacy Information Center (EPIC), and USPIRG fought the merger, including on privacy grounds.  FTC Commissioner Pamela Harbour played a key role forcing the agency (then run by Chairwoman Majoris, whose husband’s law firm represented DoubleClick) to address the privacy concerns. As a consequence of the political pressure from its failure to seriously examine the consumer privacy issues of the Google deal, the FTC staff were told to develop these principles.

The next chair of the FTC needs to take privacy and online consumer protection issues seriously.  The agency does need more resources, but also a new spirit.  If the FTC had been on the job, and was examining how lending institutions were recklessly promoting loans and mortgages, maybe today’s mess wouldn’t be as tragic as it is.  More to come after the commission releases the principles.

Is the White House Collecting Data on the Public via YouTube?

According to CNET, the White House has again changed its privacy policy regarding persistent cookies and online videos.  Now all video providers, it appears–not just YouTube–has received a formal exemption of the federal prohibition on persistent cookies.

But beyond the cookie issue–which shouldn’t be placed at all when the public watches a government video–are questions regarding statistical and tracking data.  Is Google/YouTube providing the White House with any analytics and user information [such as through YouTube Insight]?  For example, YouTube allows “brand channels” to know “the gender and age” of viewers; “identify the ways…users find your videos;” “Hot spots viewing information, which identifies viewing trends  for each moment in a video.” YouTube also permits brand channel video providers to track users via a “one 1px by 1px third-party tracking tag, which lets the channel owners use view-through tracking to better understand a user’s behavior after the user leaves the channel page.”

We assume the White House will answer such questions (such as whether they receive brand channel-like services), respond favorably to the FOIA request from Chris Soghoian, and ensure that the site reflects the highest possible consumer privacy standards.

Commercial Domestic Surveillance: The new White House Website, YouTube & Privacy

In a post for CNET yesterday, privacy expert Chris Soghoian revealed that President Obama’s White House “has quietly exempted YouTube from strict rules relating to the use of cookies on federal agency Web sites.”   Federal rules prohibit the use of what are called “persistent cookies,” that can track an online users activities and behavior.  Soghoian cites the new White House privacy policy that states, “A waiver has been issued by the White House Counsel’s office to allow for the use of this persistent cookie.”  Google’s YouTube received this exemption, notes the White House site, “to help maintain the integrity of video statistics.”

Now the White House has made a quick change, according to a post written today by Soghoian.  “Obama’s web team rolled out a technical fix that severely limits YouTube’s ability to track most visitors to the White House website,” he writes. “By late Thursday evening, each embedded YouTube video had been replaced with an image of a video player, which a user must click on before the real YouTube player will be loaded. The result of this change is that YouTube is now only able to use cookies to track users who click on the “play” button on an embedded YouTube video — the majority of people who scroll through a page without clicking play will not be tracked.”  But he also describes the new approach as a “band-aid. Those users who do click the play button will be secretly tracked as they navigate the White House website — and if those users have visited YouTube or any other Google run website in the past, the fact that they watched an Obama video will be added to the existing massive pile of data the company has compiled on each web surfer.”

But for those White House web site visitors who do click on the YouTube videos, they will likely become part of the data analysis which could be generated via Google’s YouTube Insight.  That’s a video analytics tool providing “detailed statistics” on video use.  One Google executive offered a commercial example of the tools’ features: “YouTube’s geographical insights could help marketers determine ad effectiveness and campaign optimization. For instance, he said, different versions of a movie trailer might perform better in different regions.”  Other YouTube analytical data available  includes a “demographics tab that displays view count information broken down by age group (such as ages 18-24), gender, or a combination of the two, to help you get a better understanding of the makeup of your YouTube audience. We show you general information about your viewers in anonymous and aggregate form, based on the birth date and gender information that users share with us when they create YouTube accounts.”  (Google says “individual users can’t be personally identified.”  But the company has embraced a narrow definition of what privacy protections users should expect, the so-called APEC standard).

Persistent cookies, explains U.S. Military Academy computer science professor Greg Conti, “can exist for many years…repeatedly identifying the user to the issuing web site…persistent cookies are specifically designed to uniquely identify users on return visits to web sites…In terms of anonymity, this is bad.  Advertisers have found innovative ways to exploit cookies to track users as they visit web sites that contain ads or other content.”  [source is Professor Conti’s terrific book, Googling Security:  How Much Does Google Know About You?  Addison-Wesley.  2009.  Page 73]

Of course, Google/YouTube’s cookie placed via a White House visit sets the stage for the company to further track and analyze citizens/ users.  Given YouTube’s ever-growing expansion as a commercial video advertising service, its ability to harness the White House data cookie will undoubtedly prove useful for the company.

The revised White House privacy policy does offer users a way to view the videos “without the use of persistent cookies” through the extra step of clicking the “link to download the video file… provided just below the video.” But we think opt-out is the incorrect approach.

The Obama White House should set the standard for protecting privacy in the digital era.  They should maintain the prohibition on persistent tracking cookies.  Nor should they permit any commercial operator, including Google’s YouTube, to engage in federally-sanctioned data collection.  We know the new Obama Administration has many important issues to address.  But they also need to develop a sophisticated critique of the online advertising industry, ensuring privacy and consumer protection.  The Obama Administration should be able to articulate a balanced perspective– that can take advantage and foster the democratic potential of digital media, while also meaningfully addressing the harms.

Google, YouTube, and DoubleClick Cookies Placed on Users of YouTube’s new Congress Channels, Says Computer Scientist

Columbia U computer professor Steven M. Bellovin has an important post on the privacy issues raised by YouTube’s new House and Senate channels.  He writes [excerpt, our emphasis] that:

“I opened a fresh web browser, with no cookies stored, and went directly to the House site. Just from that page, I ended up with cookies from YouTube, Google, and DoubleClick, another Google subsidiary. Why should Google know which members of Congress I’m interested in? Do they plan to correlate political viewing preferences with, say, searches I do on guns, hybrid cars, religion, privacy, etc.?

The incoming executive branch has made the same mistake: President-Elect Obama’s videos on Change.gov are also hosted on (among others) YouTube. Nor does the privacy policy say anything at all about 3rd-party cookies.

Video channels providing the public access to members of Congress and the new Administration should be in the forefront of privacy protection-and not serve as a data collection shill for any company.  Nor should one company be permitted to shape broadband video access to federal officials.

Google Lobbying: Why Congress Should Not Use the new YouTube Senate and House Video Hubs

Google is taking a lobbying tactic developed in part by CSPAN years ago–offer members of Congress a free service so they can be seen by the public.  That kind of electronic or digital campaign contribution helps insure that Congress will think twice about biting (or regulating) the video hand that feeds.  Google’s new YouTube Senate and House Hub channels raise a number of concerns and policy questions.

For example, what happens to the user data as people click on the Congressional YouTube channels?  Does Google get to collect, analyze and use such data for its growing political online advertising business?  Beyond privacy, should Congress be endorsing a private for-profit venture as the principal access point voters and constituents need to use?  Does the use of YouTube create a potential conflict of interest for members of Congress who will need to regulate Google–on such things as competition (the DoJ recently described Google as a monopoly); privacy, consumer protection, etc (remember, Google sells all kinds of ads for mortgages, credit cards, junk food, health remedies, etc.).

It’s not a coincidence perhaps that Google’s YouTube congressional channel announcement comes at the same time the company is expanding its online ad business for politics.  As Ad Age reports this week,“The end of an election season usually means dismantling the campaign apparatus until the next cycle. But not at Google; not this year…Rather than packing it all away until 2010, it’s hoping to build a year-round political-advertising business one House seat and hot-button issue at a time.  “There are 500,000 elected officials in the U.S. With the advances we’ve made in geo-targeting, we think this will be part of every political campaign in the country, as well as issue campaigns,” said Peter Greenberger, Google’s director of election and issue advocacy…Google doesn’t yet offer targeting based on congressional districts, but with ZIP code and city targeting, politicians and advocacy groups can cobble together a reasonable approximation of a congressional district.”

The in-coming Obama Administration has had the support of Google’s CEO, and company officials have played a role in the transition.  But the new administration should develop a digital outreach approach to the public which is public–and non-commercial–in nature.  It shouldn’t show any favoritism, even if Google is the leading search and video service.  It should be a change.org--not a government via dot com.

see: “Election  is Over, but Google Still Chasing Political Spending.”  Michael Learmonth.  Advertising Age.  January 12, 2009.

Ad agency has “profiled more than one-third of the world’s online population”

Developments in advertising, data collection, consumer analysis and targeting must be transparent and accountable to the public.  In a profile of Havas Digital, OMMA Magazine notes that [our emphasis]:

Havas has created a dynamic online ad trading system that separates audiences from publishing content, and it makes user profile and unique cookie data king, rather than the inventory a publisher serves.  The core of Havas Digital’s virtual brand network is its Artemis database management and reporting system, which has already profiled more than one-third of the world’s online population. That and the agency’s Adnetik system help deliver customized roi analytics for media buying.”  “Artemis is the central piece of our media buying offering,” Kasper [Adam Kaspar, a senior VP] says. “Its importance has only grown as the technology has improved.”Coupled with proprietary algorithms, that database has allowed the agency to develop systems that draw on data from third parties, including clients, publishers and networks, that helps it understand which audiences command the most value at a particular time for specific brands.”

Artemis is a “marketing data warehouse.”  Yahoo is using the service, including for its already data-enabled Right Media Exchange.  Havas describes Artemis as “our proprietary marketing decision support system – a secure warehouse for all your marketing data, plus reporting tools that help make sense of it all.  Unlike some of the less sophisticated reports advertisers may receive from ad-servers, for instance, Artemis® provides detailed reporting right down to the user level.”

The FTC, EU, Congress and others will need to need to investigate the growing role consumer data plays in targeting us on and offline.  We don’t need private ministries of information tracking the global public.

CDD Memo to President-elect Obama’s FTC Transition team

My organization provided the FTC-transition team of President-elect Obama a brief memo on what the agency should do as it changes leadership. With a new majority, the FTC should be in the forefront of addressing how the financial and marketing system has evolved in ways which threaten our fiscal well-being and privacy, among many other concerns.  Here’s an excerpt:

The Federal Trade Commission has a potentially extraordinary role to play in the new Administration.  The agency should be engaged in developing and promoting policies that protect privacy, ensure consumer welfare, and stimulate economic development.  Unfortunately, in recent years the commission has largely failed to comprehend the threats to consumer privacy arising from the data collection-based online marketing system.  It ignored, for example, the role that data collection and behavioral targeting played in the marketing of subprime loans and other consumer financial products…
Under new leadership, the FTC should view its role as a champion of consumers…. in consumer protection, privacy, and online-related competition policy, the agency has failed to conduct the kind of serious inquiry that would enable it to make sophisticated recommendations or decisions.  It has not developed a 21st century framework that will protect consumers in the digital marketing “ecosystem.”  We saw this with behavioral advertising and privacy policy, protecting children and youth from marketing linked to the obesity crisis, and in the approval of the Google and DoubleClick merger, for example.
If the FTC is to help the country move forward during this crucial period of economic transition, it should:
•    Make Consumer Protection its highest priority
•    Recruit new staff for consumer protection with a background and commitment to consumer interests
•    Engage in a serious and ongoing analysis of the digital marketplace, with a focus on the impact of interactive advertising/behavioral targeting on financial products, health and medical services, product purchasing, and children and adolescents
•    Propose new policies to protect consumer privacy and welfare online…
•    Work with the FCC and state authorities to create a new Mobile Marketing, Consumer Protection, and Privacy Task Force (with annual reports to the public, and, where appropriate, new legislation recommended to Congress).

Ad Industry Lawyer Spins in Ad Age that Privacy Will Be on “Back Burner.” Not Only Incorrect–but self-serving

This week’s Advertising Age has a “Legal Issues to Watch in 2009” column.  Written by Douglas J. Wood of Reed Smith, it claims that: “PRIVACY TO THE BACK BURNER- Congress and regulators are in a Catch-22: While under constant pressure from constituents and consumerists to curtail the use of personal information or behavioral targeting, they recognize that advertising is the backbone of the internet. So while there will be occasional skirmishes, the war on privacy will continue in its stalemate. Regulators will also see browser makers offering more control to consumers to block ads and the collection of personal information as adequate progress.”

Mr. Wood, it turns out is “a member of Reed Smith’s Executive Committee and the firm’s Advertising Technology & Media Group…and is General Counsel to both the Association of National Advertisers and the Advertising Research Foundation.

Perhaps Mr. Wood is too busy to really follow Hill and FTC developments, because he is wrong.  There will be considerable activity on the Hill and elsewhere.   His column should have been labeled as written by the lawyer for the ad industry lobby group.  But it does reflect a lack of insight about the online ad industry’s problems related to privacy and consumer protection.