Leading Health, Privacy, and Consumer Groups Call on FTC to Protect Adolescent Privacy online

For Immediate Release:  Feb. 18, 2011
Child, Health and Consumer Advocates Ask FTC for Teen Privacy Protections, including Do-Not-Track and No Behavioral Targeting

Today a Coalition of Child, Health and Consumer Advocates filed comments on the Federal Trade Commission’s proposed privacy framework asking for increased privacy protections for adolescents.   The coalition includes leading advocates such as the Center for Digital Democracy, the American Academy of Child and Adolescent Psychiatry, American Academy of Pediatrics, Children Now, and the Consumer Federation of America.

Privacy protections are needed as teens are increasingly subjected to privacy invasions online. Teens are using new media technologies for key social interactions and to explore their identities. This increased use of digital media subjects them to wholesale data collection and profiling of even their most intimate interactions with friends, family, and schools. Meanwhile, recent research in psychology and neuroscience reveals that teens are more prone to risky behavior when their anxieties and peer relations are exploited. Privacy protections are needed to keep the online world social and safe.

Companies should not use data to behaviorally profile teens. The framework should also provide enhanced choice for adolescents, including a Do Not Track feature. In implementing “privacy by design,” companies should consider the needs and vulnerabilities of teens.  They should address those vulnerabilities by, for example, minimizing the amount of data collected from teens.  Data that is collected should be retained for only short periods and should be afforded greater security.

“Teens live online today,” said Guilherme Roschke, attorney for CDD. “This time of development and maturation requires privacy protections. Teens cannot go it alone against the vast data collection and profiling infrastructure of new media technologies that not even adults can understand.”

“Because of their avid use of new media, adolescents are primary targets for digital marketing,” explained co-signer Kathryn C. Montgomery, Ph.D. “The unprecedented ability of digital technologies to track and profile individuals across the media landscape, and to engage in sophisticated forms of targeting, puts these young people at special risk of compromising their privacy.”

The full coalition includes:

Center for Digital Democracy, American Academy of Child and Adolescent Psychiatry, American Academy of Pediatrics, Berkeley Media Studies Group, a project of the Public Health Institute, Children Now, Consumer Federation of America, Consumer Watchdog, David VB Britt, Retired CEO, Sesame Workshop, Ellen Wartella, Kathryn Montgomery, National Policy & Legal Analysis Network to Prevent Childhood Obesity, a project of Public Health Law & Policy, The Praxis Project, Privacy Rights Clearinghouse, Public Good, Public Health Institute, Tamara R. Piety, and World Privacy Forum

Guilherme Roschke
Staff Attorney / Fellow
Institute for Public Representation
First Amendment and Media Center
Georgetown University Law Center
T:(202) 662-9543
F:(202) 662-9634
gcr22@law.georgetown.edu
http://www.law.georgetown.edu/clinics/ipr/
**********

NTIA’s Strickling on Privacy: He Forgets Consumers!

Here’s an excerpt via Politico from their interview with Department of Commerce NTIA Chief–and potential privacy policy maven–Lawrence Strickling.  Note the absence of consumers in his description of the problem and issues.  The Commerce Department, which is jockeying to have a greater role in the privacy debate (which the largest data collectors like because they are afraid of the consumer watchdog-minded FTC), better start making consumer needs come first–if they are to have any credibility here in the U.S. and with the EU.   It appears from the interview the Commerce Department has largely made up its mind to rely on “voluntary enforceable codes of conduct.”   Here’s what Larry said in a Q & A:

NTIA is also getting into the privacy discussions.

It’s part of the larger Internet Policy Task Force that’s underway here at Commerce where our agency — along with other agencies — is looking at a number of Internet policy issues. Privacy is first and foremost on the list, but we’re also looking at the protection of intellectual property, cybersecurity, and we’ll be looking at the free flow of information. For Commerce, our theme links all these topics around the notion of innovation, preserving the job creation and business expansion aspects of the Internet and trying to protect that going forward. So in the area of privacy, the task force did issue the green paper late last year. Comments just came in on that, so people are starting to work their way through them, with the goal that we’ll take the green paper and turn it into a more final pronouncement of the Department of Commerce or perhaps even the administration’s policy on privacy later this spring.

Do you think there should be a government office specifically dedicated to privacy?

We certainly believe that if we’re going to move forward with these voluntary enforceable codes of conduct with the industry that the function of convening and organizing that process should sit [in the government]. Our believe is that the Department of Commerce, and in particular NTIA, is the appropriate place for that function to reside. When we start talking about offices that sounds more bureaucratic and maybe requires departmental administrative orders. But on the issue of making sure that function is done, yes, based on what we see in the comments, we think that’s an appropriate idea. We think it’s a necessary idea in terms of working with industry and we’ll see how this all plays out over the course of the spring.

What is NTIA doing internationally on the privacy front?

Privacy has big international implications because the Council of Europe is looking at redoing what they’ve done in privacy. The European Union is looking at this issue. OECD is looking at the issue. So we’re very cognizant of the need to make sure our policy, whatever it is, is designed in a way to best harmonize with what’s happening in the rest of the world, and in particularly Europe.

The new Self-Reg Online Ad Plan–Digital “Deja-vu” All Over Again! See What they Say about the NAI Now!

In 1999, online marketers promised consumers they would protect their privacy.  Leading interactive ad companies created the Network Advertising Initiative (NAI) as a scheme to head-off proposals by the FTC that would help regulate online profiling.  Now it turns out, says the online ad industry, the NAI really couldn’t work.  So they have developed yet another self-regulatory effort.  Here’s what online marketers told Ad Week today:  “The move marks the most significant regulation the industry has imposed on companies and goes significantly farther than the Network Advertising Initiative, which held third-party advertisers needed to allow consumers to opt out. Doing so, however, was a cumbersome process.“   So the industry didn’t tell the FTC or consumers that the NAI wasn’t consumer friendly and “cumbersome.”  Yet they have used the NAI as a political bulwark to head-off consumer protection rules.  Shame on them.  Meanwhile, in the same story, it’s revealed that only now–as pressure mounts to protect online consumers—does the industry recognize protecting privacy is important:  “The guys that drive the industry have figured out this privacy stuff does matter,” said Scott Meyer, CEO of Better Advertising Project, which will help companies comply with the requirements.

The new “aboutads.info” website established by the industry fails to provide consumers serious information about cookies and behavioral targeting and profiling.  It reveals how little the industry is committed to protecting privacy and informing U.S. consumers about the process.  To see how this new plan is really designed to protect the data collection business, examine the rules for sensitive information. Beyond the children’s privacy law (COPPA) we got enacted in 1998, this scheme permits full-scale collection and use of financial and health information.   Under the “new” self-reg policies, the narrowest of definitions for respecting your financial and health information has been created:  “Entities should not collect and use financial account numbers, Social Security numbers, pharmaceutical prescriptions or medical records about a specific individual for OBA without Consent.”
Shame on them.  Online marketers spent some $3 billion last year on online financial marketing and will spend $1 billion for pharma and health related targeting in 2010. Consumer data collected by online financial and health marketers, much of which is sensitive and personal, is ok under the industry’s “new” plan.

PS:  The folks at Better Advertising need to take a course in online marketing–and change its new website so it really informs consumers about the process.  What it has now would get a C-minus in any class on online marketing.  They can start with 360 degree targeting, online and offline profiling, rich media, a serious description of online auctions, the tracking process, work on “engagement” and neuromarketing,” social media marketing, etc.  Consumers deserve better.

Online Marketers, Privacy & Self-Regulation: “Repeatedly Failed Promises Syndrome”

To help undermine the impact of the forthcoming FTC proposal to protect consumer privacy, a coalition of online ad lobby groups will unveil yet another self-regulation plan.  According to Mediapost, online consumers will soon see “[I]cons to signify behavioral advertising — or serving ads based on people’s Web activity.”  Since 1999, online ad groups have rolled out self-regulatory regimes promising to protect consumers online.  Each has failed to do so.   This new effort involves the very same groups and companies that offered self-regulatory promises in the past.   For example, see the World Privacy Forum’s report on the failure of the Network Advertising Initiative’s self-reg schemes; that group is part of the new effort, btw.

This new effort is seriously flawed–and before marketers and advertisers adopt it, it must be independently evaluated by consumer groups, independent academics, and the FTC.  We believe that the system will fail to protect consumers–because it will not candidly inform them about how the data is collected and used.  Meanwhile, in a revealing flip-flip, the IAB’s UK counterpart deep-sixed its just released safeguard on retargeting.  According to a new report, “[O]nline advertising trade body the Interactive Advertising Bureau (IAB) has withdrawn a code of practice which recommended that behavioural advertising retargeting cookies should expire after 48 hours. The IAB’s Affiliate Marketing Council (AMC) published the code last week. It applied to the practice of ‘retargeting’ web users who had visited a site with ads for that site on other people’s websites, using cookies to track their movements and activities…That code has been withdrawn and will be reworked after further industry consultation, though, the IAB said. The code has disappeared from the IAB’s website.”

Consumers and citizens require real safeguards governed by law and regulation–not flimsy digital promises designed to sanction ever-expanding data collection practices.

Microsoft Fuels Youth Obesity Epidemic via Xbox tie-ins: Digital Product Placement and Beyond

Microsoft is one of the most aggressive online marketing companies targeting teens online.  Across the globe, Microsoft Advertising touts its ability to deliver interactive food and beverage ads on PCs, mobile phones, gaming devices and via IM, Bing, etc.  Teens and young adults are the key target–but so are young children.  In its desperation to catch up with online ad leader Google, Microsoft has strained to be the “yes we will” digital agency.  For several years, Microsoft has had a close tie with Pepsi’s Doritos and Mountain Dew, offering various special games that feature the chip.  Now Microsoft is continuing that alliance, as the new Halo:Reach edition comes to market.  As explained by Variety, “helping build Microsoft’s brand is Madison Avenue, which has fully embraced the franchise’s main character, Master Chief, and turned him into a pitch soldier, with PepsiCo plastering him on 300 million Mountain Dew cans and 30 million bags of Doritos for the launch of the latest game.”

Microsoft officials–and those who play a influential role in the company–should not endorse digital marketing schemes that target youth–and especially contribute to such major public health problems as youth obesity.  For shame, Microsoft.

Online Ad Lobby and Chamber Celebrate Victory over Consumer Protection & FTC

Yesterday, the online ad lobby [IAB, ANA, DMA]–working with Chamber of Commerce–scored a major political victory by forcing the Financial reform bill conference committee to drop proposed provisions that would have strengthened the FTC.  Under the House bill, the FTC would have been given the same kind of regulatory authority most federal agencies have [APA rulemaking].  Marketers and advertisers are celebrating their win, because it keeps the FTC on a weakened and short political leash.  While consumer protection is significantly expanded because of the CFPB and new financial rules, the FTC is to remain largely hamstrung.  The online marketing and advertising lobby [including ANA, DMA–see below] were afraid that the newly invigorated FTC under Pres. Obama would require the industry to protect privacy online and also become more accountable to consumers engaged in e-commerce.   I heard IAB and Chamber are dancing in the streets! Congressmen Barney Frank, Henry Waxman and Sen. Rockefeller deserve praise for working hard to protect consumers, including their proposal on the FTC.

Here’s what two of the ad groups placed on their sites about the FTC issue:

Progress on FTC Enforcement Provisions in Wall Street Reform Conference

June 23, 2010

The marketing and media community has made substantial progress on defeating the broad expansion of FTC powers that is included in the House version of the Wall Street reform bill.  But we still need your assistance to keep these provisions out of the final bill.

Yesterday the Senate conferees presented an offer on the bill that rejected the new FTC powers that are in the House version.  Chairman Dodd indicated that while he may support changes in the Magnuson Moss rulemaking process, there is no Senate provision and these issues are too complex and important to be resolved in the context of the Wall Street reform bill.  Conferees hope to finish the conference this week so the final bill can be cleared for the President’s signature next month.

The House conferees may still continue to push for these provisions, so it is very important that marketers contact the Senate conferees to express our appreciation for their support and to urge them to remain strongly opposed to these new powers for the FTC in this bill.  Contact information for the Senate conferees is located here and our letter to Senate conferees is available here.  Please let the Senators know if you have plants or operations in their states.

ANA took part in a very important meeting yesterday with Senate Commerce Committee Chairman Jay Rockefeller on these issues.  We argued that these issues are very important to the entire marketing community and deserve careful consideration outside of the context of the Wall Street reform bill.  The Chairman strongly indicated that he will continue to push for changes in the Magnuson Moss rulemaking procedures this year.

If you have any questions about this matter, please contact Dan Jaffe (djaffe@ana.net) or Keith Scarborough (kscarborough@ana.net) in ANA’s Washington, DC office at (202) 296-1883.

http://www.ana.net/advocacy/content/2418

DMA Asks Financial Reform Conferees to Keep FTC Expansion Out of ‘Restoring American Financial Stability Act’

June 10, 2010 — The Direct Marketing Association (DMA) today was joined by 47 other trade associations and business coalitions in sending a letter to each of the conferees on H.R. 4173, the “Restoring American Financial Stability Act” (RAFSA), urging them to keep language that would dramatically expand the powers of the Federal Trade Commission (FTC) out of the final bill.

As the House and Senate conferees work to reconcile their versions of the financial regulatory legislation, the associations — which represent hundreds of thousands of US companies from a wide array of industry segments — expressed strong opposition to provisions in the House version of the bill that would expand the FTC’s rulemaking and enforcement authority over virtually every sector of the American economy.

“The balance struck in the Senate bill is the right one,” said Linda Woolley, DMA’s executive vice president, government affairs.  “That bill makes the most sense in the context of financial reform legislation, maintaining the FTC’s existing jurisdiction without expanding its rulemaking and enforcement authority over industries and sectors that had nothing to do with the financial crisis.  Issues of FTC expansion deserve their own due consideration and debate in the more appropriate context of an FTC reauthorization, as has been done in the past.”

DMA and the other associations strongly believe that granting the FTC broad new authority is not a necessary or relevant response to the causes of the recent recession and, therefore, asked the conferees to oppose the inclusion of any provisions that would expand FTC authority, rather than making changes to the Commission that would have a fundamental impact on the entire business community and the broader American economy.

For more information please visit www.dmaaction.org.
http://www.the-dma.org/cgi/dispannouncements?article=1449

NAI New “Study” on Behavioral Targeting: Self-Defense for Privacy-Threatening Data Collection

The Network Advertising Initiative (NAI), the online ad industry’s toothless self-regulatory scheme–has released a report designed to undermine policy safeguards protecting consumer privacy.  The NAI engaged the services of Prof. J. Howard Beales--a former FTC official who largely supported self-regulation of online data collection during his tenure at the agency–to issue a study.  Not surprisingly–and something anyone who follows behavioral online advertising knows–is that these practices work.  When you track, collect, profile a consumer online and know their interests, background, location, you can make a better ad experience.  Privacy is only mentioned once in the report.   The study’s message is really that if it makes money, don’t think of protecting consumer privacy.   The NAI explained in a release that “Behaviorally targeted ads sell for twice the price and offer twice the effectiveness of normal run-of-network ads, significantly enhancing the advertising revenue engine driving the growth of the Internet.”

The suggestion that we should not be concerned about privacy even if these practices threaten consumer protection is absurd.  Anyone who suggests that we should permit a wholesale invasion of privacy (and more) because it helps support online publishing isn’t addressing the critical question.  How can we protect consumers and also have a robust online content system?  Both can–and must–be done.

Where Does Google and Microsoft Really Stand–with the IAB and ad lobby or for Consumer Protection?

Both Google and Microsoft serve on the executive committee of the Interactive Ad Bureau, a trade association fighting against consumer privacy proposals in Congress and the FTC.  The IAB just sent a letter signed by other ad and marketing industry lobbyists opposing Obama and congressional proposals to expand the ability of the FTC to better protect consumers.  My CDD just sent emails to officials at both Google and Microsoft asking them to clarify where they stand on the IAB’s letter [see below].  Do our two leading online marketing leaders support financial and regulatory reform, including protecting privacy?  Or does the IAB letter–and Google and Microsoft’s own role helping govern that trade lobby group–really reflect their own position against better consumer protection? Not coincidently, the IAB’s PAC has expanded its PAC contribution giving to congress.

Why does the IAB and other ad groups want to scuttle a more capable FTC?  Think online financial products, including mortgages, pharmaceutical operated social networks, digital ads targeting teens fueling the youth obesity crisis, ads created by brain research to influence our subconscious minds, a mobile marketing system that targets us because it knows our location, interests and behavior.  The IAB is terrified that a responsible consumer protection agency will not only peek under the ‘digital hood,’ as the Obama FTC is currently doing.  But actually propose policies and bring cases that rein in irresponsible and harmful business practices.  So Microsoft and Google:  who are with?  Consumers or the special interest advertising lobby?
*****

letter to Google:  22 January 2010

Dear Pablo, Jane, Peter and Alan:

As you may know, the Interactive Advertising Bureau recently sent a letter  to Congress, along with other ad related groups, opposing the expansion of FTC regulatory authority as proposed in the Consumer Financial Protection Agency bill and related reauthorization [http://www.clickz.com/3636212].

Google serves on the executive committee of the IAB’s board.  For the record, does Google support IAB’s stance that, as news reports say, if the FTC is given additional enforcement and penalty-making authority, “the FTC could essentially act as an unelected legislature governing industries and sectors across the economy.”

If Google disagrees with the IAB’s letter, I ask that it make its position public as soon as possible.  I also respectfully request Google state its position regarding the Consumer Financial Protection Agency proposal, as well as its position on expanding FTC authority.

Regards,

Jeff Chester
Center for Digital Democracy
www.democraticmedia.org

letter to Microsoft:  22 Jan. 2010:

Dear Mike and Frank:

As you may know, the Interactive Advertising Bureau recently sent a letter to Congress, along with other ad related groups, opposing the expansion of FTC regulatory authority as proposed in the Consumer Financial Protection Agency bill and related reauthorization [http://www.clickz.com/3636212].

Microsoft serves on the executive committee of the IAB’s board.  For the record, does Microsoft support IAB’s stance that, as news reports say, if the FTC is given additional enforcement and penalty-making authority, “the FTC could essentially act as an unelected legislature governing industries and sectors across the economy.”

If Microsoft disagrees with the IAB’s letter, I ask that it make its position public as soon as possible.  I also respectfully request Microsoft state its position regarding the Consumer Financial Protection Agency proposal, as well as its position on expanding FTC authority.

Regards,

Jeff Chester
Center for Digital Democracy
www.democraticmedia.org

Consumer and Privacy Groups at FTC Roundtable to Call for Decisive Agency Action

Washington, DC, December 6, 2009 – On Monday December 7, 2009, consumer representatives and privacy experts speaking at the first of three Federal Trade Commission (FTC) Exploring Privacy Roundtable Series will call on the agency to adopt new policies to protect consumer privacy in today’s digitized world. Consumer and privacy groups, as well as academics and policymakers, have increasingly looked to the FTC to ensure that Americans have control over how their information is collected and used.

The groups have asked the Commission to issue a comprehensive set of Fair Information Principles for the digital era, and to abandon its previous notice and choice model, which is not effective for consumer privacy protection.

Specifically, at the Roundtable on Monday, consumer panelists and privacy experts will call on the FTC to stop relying on industry privacy self-regulation because of its long history of failure. Last September, a number of consumer groups provided Congressional leaders and the FTC a detailed blueprint of pro-active measures designed to protect privacy, available at: http://www.democraticmedia.org/release/privacy-release-20090901.

These measures include giving individuals the right to see, have a copy of, and delete any information about them; ensuring that the use of consumer data for any credit, employment, insurance, or governmental purpose or for redlining is prohibited; and ensuring that websites should only initially collect and use data from consumers for a 24-hour period, with the exception of information categorized as sensitive, which should not be collected at all. The groups have also requested that the FTC establish a Do Not Track registry.

Quotes from Monday’s panelists:

Marc Rotenberg, EPIC: “There is an urgent need for the Federal Trade Commission to address the growing threat to consumer privacy.  The Commission must hold accountable those companies that collect and use personal information. Self-regulation has clearly failed.”

Jeff Chester, Center for Digital Democracy: “Consumers increasingly confront a sophisticated and pervasive data collection apparatus that can profile, track and target them online. The Obama FTC must quickly act to protect the privacy of Americans,including information related to their finances, health, and ethnicity.”

Susan Grant, Consumer Federation of America: “It’s time to recognize privacy as a fundamental human right and create a public policy framework that requires that right to be respected,” said Susan Grant, Director of Consumer Protection at Consumer Federation of America. “Rather than stifling innovation, this will spur innovative ways to make the marketplace work better for consumers and businesses.”

Pam Dixon, World Privacy Forum: “Self-regulation of commercial data brokers has been utterly ineffective to protect consumers. It’s not just bad actors who sell personal information ranging from mental health information, medical status, income, religious and ethnic status, and the like. The sale of personal information is a routine business model for many in corporate America, and neither consumers nor policymakers are aware of the amount of trafficking in personal information. It’s time to tame the wild west with laws that incorporate the principles of the Fair Credit Reporting Act to ensure transparency, accountability, and consumer control.”

Written statements and other materials for the roundtable panelists are available at the following links:

CDD/USPIRG: http://www.democraticmedia.org/node/419

WPF: http://www.worldprivacyforum.org/pdf/WPF_Comments_FTC_110609fs.pdf

CFA: http://www.consumerfed.org/elements/www.consumerfed.org/File/5%20Myths%20about%20Online%20Behavioral%20Advertising%2011_12_09.pdf

EPIC: www.epic.org

A Google Online Ad Goal: “engage advertising agencies and brand marketers in programs that move the needle for their companies”

That phrase is part of a Google job ad for a “Display Account Manager” focused on the auto industry  (based in Detroit).  Here’s an excerpt:

You will drive the online video marketplace forward and engage advertising agencies and brand marketers in programs that move the needle for their companies. The primary responsibility of the Display Account Manager is to drive new business revenue for YouTube and other Google display services and products with Fortune 1000 advertisers across multiple industries. You’ll manage business relationships to ensure that your clients’ needs and requirements are met. Additionally, you will be involved in the operational execution of your clients’ campaigns. This role is not for the faint of heart…Identify and execute on new business with new clients and upsell opportunities for existing clients and prospect within accounts and agencies to uncover leads, new contacts, and revenue.