Tracking Mobile Users by Behavior and Race: Why the FTC Must Address Mobile Privacy ASAP

Here’s a brief excerpt from the “The mobiThinking guide to mobile advertising networks 2010.”  Our emphasis.

Microsoft Mobile Advertising: Targeting capabilities include device, demographic (gender, age, household income), geographic and behavior.

Advertising.com/AOL: Full suite of targeting options, including device, browser, operating system, carrier, on/off-deck, geography, time-segment, content, and multiple demographic combinations.

Nokia Interactive Advertising: Demographics, location, handset type, and in the US by channels (e.g. auto, news, sports.

Quattro Wireless: a) contextual: media type, channel, publisher; b) demographic: gender, age, ethnicity, education; c) location; d) mobile: carrier, device class, manufacturer, model, features, operating system, browser; e) frequency of exposure.

Jumptap: Jumptap offers 64 different targeting options including: demographic, geographic location, carrier, on/off-deck (operator portal), device types and browser, time of day, day of week, content category and frequency controls. These targeting parameters are derived from multiple data courses, including contextual information and true carrier subscriber information. Premium brand advertising guarantees the ad will appear on certain sections of chosen site at the time specified.

Millennial Media: Audience targeting: Millennial can uniquely identify a user across all sites on the network – they are grouped into audiences, based on their observed behaviors on sites, participation and review of click-stream data, so campaigns can be targeted at specific audiences. (Millennial discloses these techniques, with an opt-out in accordance with the Self-Regulatory Principles for Online Behavioral Advertising, July 2009). Advertisers can also do Run of Network (RON) campaigns or target by channel, custom subnet, takeover, network blocks or demographic. There is also targeting via geography, carrier, handset model/manufacturer/operating system, handset features, age of device, time of day, location, Wi-Fi, etc.

Online Financial Marketing, Subprime Loans, Digital Banking & Neuromarketing–Why We Need the Consumer Protection Financial Agency

How we handle our money–including credit, loans and banking–is moving online.  Digital marketing of mortgages, credit cards, student loans and other financial products will become the dominant way we relate to banking and related services.  The CEO of Capital One has already said that ” [A] mobile phone is just a credit card with an antenna.”  So called M-commerce (mobile commerce) will be a crucial avenue where we actually apply for credit on “the fly,” so to speak, with our cell phones themselves used to buy products.   Banks and other financial companies are using Facebook, other social media, online video, Twitter, search engines and interactive online marketing techniques to sell their services to consumers.  They are also using digital media in PR campaigns designed to make consumers forget about their unethical behaviors which led to the current fiscal crisis.

Financial services companies are even using so-called neuromarketing–testing messages via fMRIs, for example–to help hone their marketing messages.  Neurofocus, a Nielsen backed company that helps create digital and other ads based on brainwave research, released a study  earlier this year that “dived deep into test subjects subconscious minds to discover their hidden, unspoken beliefs and feelings about financial institution brands.” They “tested consumers in its laboratory to determine exactly what financial brand messages they responded to best, at the deep subconscious level of their minds, where brand perceptions, brand loyalty, and purchase intent are truly formed.”  Financial marketers are also using behavioral targeting online, which stealthily collects data on us for tracking and target marketing. That’s why we keep seeing ads for credit cards and other money-related products.  The information gathered as we fill in forms on the Internet  can be sold as part of the online lead generation business.  Online lead generation played a role in the subprime debacle, as consumers provided marketers with personal information that helped trigger pitches for mortgages and other credit.

Alternet has just published my article on these issues.  It can be found here.

Consumer and Privacy Groups at FTC Roundtable to Call for Decisive Agency Action

Washington, DC, December 6, 2009 – On Monday December 7, 2009, consumer representatives and privacy experts speaking at the first of three Federal Trade Commission (FTC) Exploring Privacy Roundtable Series will call on the agency to adopt new policies to protect consumer privacy in today’s digitized world. Consumer and privacy groups, as well as academics and policymakers, have increasingly looked to the FTC to ensure that Americans have control over how their information is collected and used.

The groups have asked the Commission to issue a comprehensive set of Fair Information Principles for the digital era, and to abandon its previous notice and choice model, which is not effective for consumer privacy protection.

Specifically, at the Roundtable on Monday, consumer panelists and privacy experts will call on the FTC to stop relying on industry privacy self-regulation because of its long history of failure. Last September, a number of consumer groups provided Congressional leaders and the FTC a detailed blueprint of pro-active measures designed to protect privacy, available at: http://www.democraticmedia.org/release/privacy-release-20090901.

These measures include giving individuals the right to see, have a copy of, and delete any information about them; ensuring that the use of consumer data for any credit, employment, insurance, or governmental purpose or for redlining is prohibited; and ensuring that websites should only initially collect and use data from consumers for a 24-hour period, with the exception of information categorized as sensitive, which should not be collected at all. The groups have also requested that the FTC establish a Do Not Track registry.

Quotes from Monday’s panelists:

Marc Rotenberg, EPIC: “There is an urgent need for the Federal Trade Commission to address the growing threat to consumer privacy.  The Commission must hold accountable those companies that collect and use personal information. Self-regulation has clearly failed.”

Jeff Chester, Center for Digital Democracy: “Consumers increasingly confront a sophisticated and pervasive data collection apparatus that can profile, track and target them online. The Obama FTC must quickly act to protect the privacy of Americans,including information related to their finances, health, and ethnicity.”

Susan Grant, Consumer Federation of America: “It’s time to recognize privacy as a fundamental human right and create a public policy framework that requires that right to be respected,” said Susan Grant, Director of Consumer Protection at Consumer Federation of America. “Rather than stifling innovation, this will spur innovative ways to make the marketplace work better for consumers and businesses.”

Pam Dixon, World Privacy Forum: “Self-regulation of commercial data brokers has been utterly ineffective to protect consumers. It’s not just bad actors who sell personal information ranging from mental health information, medical status, income, religious and ethnic status, and the like. The sale of personal information is a routine business model for many in corporate America, and neither consumers nor policymakers are aware of the amount of trafficking in personal information. It’s time to tame the wild west with laws that incorporate the principles of the Fair Credit Reporting Act to ensure transparency, accountability, and consumer control.”

Written statements and other materials for the roundtable panelists are available at the following links:

CDD/USPIRG: http://www.democraticmedia.org/node/419

WPF: http://www.worldprivacyforum.org/pdf/WPF_Comments_FTC_110609fs.pdf

CFA: http://www.consumerfed.org/elements/www.consumerfed.org/File/5%20Myths%20about%20Online%20Behavioral%20Advertising%2011_12_09.pdf

EPIC: www.epic.org

Google’s Teracent Acquisition: Why so-called `Smart’ Ads are on the privacy agenda

Yahoo has its smart ad product; now with its acquisition of Teracent so does Google.  Smart ads learn about you and can dynamically change form so the display ad can better target you.  Here’s how Google explained what the technology can do:

Teracent’s technology can pick and choose from literally thousands of creative elements of a display ad in real-time — tweaking images, products, messages or colors. These elements can be optimized depending on factors like geographic location, language, the content of the website, the time of day or the past performance of different ads.

This technology can help advertisers get better results from their display ad campaigns. In turn, this enables publishers to make more money from their ad space and delivers web users better ads and more ad-funded web content.

We’re looking forward to welcoming the Teracent team to Google and to making this technology available to our display advertising clients — including those who run display ad campaigns on the Google Content Network and our DoubleClick clients.

Games Microsoft Plays: “consumer online behavior” tracked on its video gaming service [a “massive” invasion of privacy!]

Microsoft’s just announced a new consumer tracking and profiling tool for advertisers using its Massive video gaming platform service. Calling it a “breakthrough” in its press release, the new Microsoft/comScore research tool enables advertisers:

“… to see the direct impact that in-game advertisements have on consumer online behavior…, advertisers will get an inside look at the degree to which in-game ads motivate gamers to visit Web sites, conduct brand-related search queries and engage in other online actions, something that previously had gone unmeasured…Through this collaboration with comScore, we will also now be able to measure those consumer actions that result from in-game ads. We think this has the potential to literally ‘change the game’ for both advertisers and publishers who want to improve the effectiveness of their in-game ad efforts.”

AdEffx Action Lift for Gaming matches in-game console ad serving data from Massive with comScore’s third-party, post-campaign panel data to track and measure in-game advertising effectiveness. By combining Microsoft’s proprietary, non-personally identifying Anonymous ID data, which is common across Xbox LIVE and Microsoft Web properties (known as Windows Live ID), with user data from comScore’s panel of 2 million Internet users worldwide, comScore can determine if panelists who saw in-game advertising subsequently visited a brand’s Web site, searched brand-related terms or engaged in other online behaviors important to advertisers.”

Microsoft Advertising offers “Profile Targeting”

As we just told the BEUC conference on consumer protection and online marketing, we couldn’t make this up if we tried.  Here’s what Microsoft Advertising says it can do via its UK site for marketers:

Just say who, when and where

Profile Targeting can help you find the people you’re looking for by who they are, where they are and when you want to be seen by them. Just name the characteristics that matter most to you. It could be anything from the consumer’s age, gender or country, to the day of the week you want to target the audience on.

[and here’s what they say about behavioral retargeting, which they euphemistically now call “re-messaging“]”

With Re-messaging we can narrow our audience by finding the people who have already visited you. It means we can ensure they always stay intouch and help create continual engagement with your brand.  Re-messaging is effective on its own, but works at its best whencombined with other forms of targeting and campaign performance. By placing action tags on your website, we can track visitors throughout the course of their online journey and re-message them on our network. For example the consumer may have previously searched for a hotel but not booked, compared credit cards but not applied, or visited a promotional website. Whatever it may be, if they’ve gone part way to making a purchase or performing an action, we can help you continue the conversation and ensure that the relevant message is seen by the people it matters most to.

Facebook’s latest ad targeting–“Friends of Connections Targeting” [so watch your privacy setttings!]

Facebook is expanding what brands and other marketers can do to target its users.  As InsideFacebook explains, “Facebook has just launched a new way to draw more people to your Facebook Page or application, called “Friends of connections” targeting. Here’s how it works: before today, advertisers could already target any of their “connections,” where connections are defined as:

  1. Fans of any of your Pages
  2. Users of any of your Applications
  3. Members of any of your Groups
  4. Attendees of any of your Events

Now, advertisers can target ads specifically to friends of any of these connections as well. When this option is selected, friends of connections who see the ad will also see a message about which of their friends is connected to the advertiser…This feature should lead to increased conversion on Facebook Ads…this is the first time it has allowed advertisers to specifically target just friends of connections…We also spoke directly to Tim Kendall, Facebook’s director of monetization…In many ways we view Social Ads as less surreptitious than many types of behavioral targeting technologies.”

Bravo to Public Voice’s “Global Privacy Standards for a Global World” Madrid Declaration

Last week, NGO’s and activists from across the world met in Madrid Spain to discuss threats to privacy and human rights.  It was part of the Public Voice’s excellent work to ensure that civil society is well represented in the debates over privacy and other digital media issues.  Over 100 NGO’s, including my own CDD, were initial endorsers of the “Global Privacy Standards for a Global World” Madrid Declaration. It was well received by policy makers, including the data protection commissioner community.  The all day meeting and related efforts was organized by the remarkable Katitza Rodriquez.  Bravo to her and everyone involved.

The Declaration and related work at the Data Protection conference provided a much needed counter-balance to the failure of leading online companies to seriously address their data collection practices and plans.

“Cookie Wars, Real-Time Targeting, and Proprietary Self Learning Algorithms: Why the FTC Must Act Swiftly to Protect Consumer Privacy”

That’s the title of comments filed at the U.S. Federal Trade Commission by my Center for Digital Democracy and U.S. PIRG.  I also just gave a presentation with the same name at last week’s meeting of data protection commissioners in Madrid, Spain.   It’s available here.

Here’s an excerpt:   Today, consumers online face the rapid growth and ever-increasing sophistication of the various techniques advertisers employ for data collection, profiling, and targeting across all online platforms. The growth of ad and other optimization services for targeting, involving real-time bidding on ad exchanges; the expansion of data collection capabilities from the largest advertising agencies (with the participation of leading digital media content and marketing companies); the increasing capabilities of mobile marketers to target users via enhanced data collection; and a disturbing growth of social media surveillance practices for targeted marketing are just a few of the developments the commission must address. But despite technical innovation and what may appear to be dramatic changes in the online data collection/profiling/targeting market, the commission must recognize that the underlying paradigm threatening consumer privacy online has been constant since the early 1990’s. So-called “one-to-one marketing,” where advertisers collect as much as possible on individual consumers so they can be targeted online, remains the fundamental approach.

Huffington Post CEO Opposes Consumer Privacy Safeguards [HuffPost CEO Eric Hippeau Doesn’t Get Privacy]

File this under “we aren’t concerned about the public interest when it may affect our bottom line.”  At yesterday’s Web 2.0 Summit conference, a panel on the future of news included representatives from HuffPo, Google, the NYT and others.  When a question was asked from the audience about behavioral targeting, here’s what Huffington Post CEO Eric Hippeau said [according to the WSJ]:

“it’s much ado about nothing. “I’d much rather see an ad I’m interested in,” he says. Efforts at regulation are made by people who “don’t get it.”

Shame on Mr. Hippeau.   Perhaps he opposes protecting consumer privacy because it would be inconvenient while his company expands its online ad targeting business.  HuffPost uses a range of online data collection and targeting tools, including Pubmatic for ad optimization, and Admeld. It uses Time Warner’s behavioral targeting subsidiary Tacoda [advertising.com] and also Google’s DoubleClick service.  Here’s an excerpt from HuffPost’s privacy policy:

“The more we know about you, the better we are able to customize our web site to suit your personal preferences and interests… We may also from time to time send you messages about our marketing partners’ products. To maintain a site that is free of charge and does not require registration, we display advertisements on our web site. We also use the information you give us to help our advertisers target the audience they want to reach…the ads appearing on HuffingtonPost.com are delivered to you by DoubleClick, our Web advertising serving partner. Information about your visit to this site, such as number of times you have viewed an ad (but not your name, address, or other personal information), is used to serve ads to you on this site. And, in the course of serving advertisements to this site, third party advertisers may place or recognize a unique cookie on your browser.”