Technology Policy Institute Spins the Privacy Debate in D.C.–Group funded by Some of the Biggest Data Collection Companies

Today, the Technology Policy Institute (TPI) is holding a Hill forum on privacy and the Internet.  The group’s announcement for the event states that More privacy, however, would mean less information, less valuable advertising, and thus fewer resources available for producing new low-priced services.  It is this tradeoff that Congress needs to take into account as it considers new privacy legislation.”

What an absurd, reductionistic, and intellectually-dishonest claim.  First, this group is funded by some of the largest companies engaged in behavioral data collection and also fighting meaningful privacy policies.   That includes Google and Time Warner.  TPI’s other funders involved in some form of data collection and targeted interactive marketing include AT&T, Cisco, the National Cable and Telecommunications Association and Verizon.  Rep. Cliff Stearns, the ranking member of the House Subcommittee on the Communications, Technology, and the Internet is speaking at the event: that committee is currently drafting privacy legislation to protect consumers.  Panel speakers include TPI supporters Google and Comcast.  The lone privacy group on the panel, CDT, is funded by Google and others.  One academic on the panel also works for a high-tech consulting company.  The other panel academic has done fine work on social networks and privacy.

What makes TPI’s posturing absurd, beyond its funding conflicts, is the current economic crisis.  Consumer privacy laws are required to ensure that our financial, health and other personal transactions online are conducted in a responsible manner.  Anyone–or group–who believes that we can’t have both privacy and a robust online marketplace is out of touch.

Progress & Freedom Foundation Comes to Aid of its Data-Collecting Backers (Using a `save the newspapers’ as a ploy to permit violations of consumer privacy protection!)

This report from Internetnews.com on the Progress and Freedom Foundation’s “Congressional” briefing illustrates how desperate some online marketers are that a growing number of bi-partisan congressional leaders want to protect consumer privacy.  So it’s not surprising that some groups that are actually financially supported by the biggest online marketing data collectors in the world would hold a Hill event to help out the friends who pay their bills.

It should have been noted in Ken Corbin’s that Google, Microsoft, Time Warner (AOL), News Corp. (MySpace) financially back the Progress and Freedom Foundation (PFF).  Other behavioral data targeting `want to be’s’ who monopolize U.S. online and other platforms are also backers:  AT&T, Comcast, NBC, Disney/ABC, Viacom/MTV/Nick, etc. For a list, see here.

PFF and some of its allies deliberately distort the critique of consumer and privacy groups.  We are not opposed to online marketing and also understand and support its revenue role for online publishing.  But many of us do oppose as unfair to consumers a stealth-like data collection, profiling and ubiquitous tracking system that targets people online.  One would suppose that as a sort of quasi-libertarian organization, PFF would support individual rights.  But given all the financial support PFF gets from the major online data collectors, how the group addresses the consumer privacy issue must be viewed under the `special interests pays the bills’ lens.

PFF and its allies are playing the ‘save the newspaper’ card in their desperate attempt to undermine the call for lawmakers to protect consumer privacy.  Newspapers and online publishers should be in the forefront of supporting reader/user privacy; it enhances, not conflicts, with the First Amendment in the digital era.  Finally, PFF’s positions on media issues over the years has actually contributed to the present crisis where journalism is on the endangered species list.  This is a group that has worked to dismantle the FCC, eliminate rules designed to foster diverse media ownership, and undermine network neutrality.

PS:  The article quotes from Prof. Howard Beales of George Washington University (and a fCV,ormer Bush FTC official with oversight on privacy).  Prof. Beales was on the PFF panel.  Prof. Beales, according to his CV has served as a consultant to AOL and others (including  Primerica and the Mortgage Insurance Companies of America).  Time Warner, which owns AOL, is a PFF financial backer.  All this should have been noted in the press coverage.

IAB UK’s “Good Practice Principles” on Behavioural Targeting: Alice in Wonderland Meets Online Data Collection

Last week in Brussels at a EU Consumers Summit, Google and other interactive ad companies pointed to the new Interactive Advertising Bureau/UK “Good Practice Principles for online behavioural advertising” as a model for meaningful self-regulation.  The companies that have endorsed the principles include  AOL/Platform A, AudienceScience, Google, Microsoft Advertising, NebuAd, Phorm, Specific Media, Yahoo! SARL, and Wunderloop.   The message sent to EU regulators was, in essence, don’t really worry about threats to privacy from online profiling and behavioural targeting.  But a review of the Principles suggest that there is a serious lack of “truth in advertising” when it comes to being truly candid about data collection and interactive marketing.  These Principles are insufficient–and are really a political attempt to foreclose on meaningful consumer policy safeguards.

Indeed, when one examines the new online “consumer guide” which accompanies the Principles,  one has a kind of Alice in Wonderland moment.  That’s because instead of being candid about the real purpose of behavioral advertising–and the system of interactive marketing it is a part of–the IAB paints an unreal and deliberately cheery picture where data collection, profiling, tracking, and targeting are just harmless techniques designed to give you a better Internet experience.   UK consumers–and policymakers–deserve something more forthright.

First, the IAB conveniently ignores the context in which behavioural targeting is just one data collection technique.  As they know, online marketers are creating what they term a “media and marketing ecosystem.”  A truly honest “Good Practice Principles” would address all the principal ways online marketers target consumers.  That would include, as IAB/UK knows well, such approaches as social media marketing, in-game targeting, online video, neuromarketing, engagement, etc.  A real code would address issues related to the use of behavioural data targeting and other techniques when used for such areas as finance (mortgages, loans, credit cards); health products; and targeting adolescents.

The IAB/UK also fails to reconcile how it describes behavioural targeting to its members and what it says to consumers and policymakers.  For example, the group’s glossary defines behavioural targeting as:  “A form of online marketing that uses advertising technology to target web users based on their previous behaviour. Advertising creative and content can be tailored to be of more relevance to a particular user by capturing their previous decision making behaviour (eg: filling out preferences or visiting certain areas of a site frequently) and looking for patterns.“  But its new “Good Practice” consumer guide says that “Online behavioural advertising is a way of serving advertisements on the websites you visit and making them more relevant to you and your interests. Shared interests are grouped together based upon previous web browsing activity and web users are then served advertising which matches their shared interests. In this way, advertising can be made as relevant and useful as possible.”

Incredibly, the IAB/UK claims that “the information used for targeting adverts is not personal, in that it does not identify you – the user – in the real world. Data about your browsing activity is collected and analysed anonymously.”  Such an argument flies in the face of what the signatories of the “Good Practice Principles” really tell their online ad customers.  For example, Yahoo in the UK explains that its “acclaimed behavioural targeting tool allows advertisers to deliver specific targeted ads to consumers at the point of purchase.”  Yahoo has used behavioural targeting in the UK to help sell mortgages and other financial products.  Microsoft’s UK Ad Solutions tells customers it can provide a variety of behavioural targeting tools so it “can deliver messaging to the people who are actively looking to engage with what you’re offering…With Re-messaging we can narrow our audience by finding the people who have already visited you. It means we can ensure they always stay in touch and help create continual engagement with your brand…Profile Targeting can help you find the people you’re looking for by who they are, where they are and when you want to be seen by them.”  Time Warner’s Platform A/AOL says Through our Behavioural Network, we can target your most valuable visitors across our network, earning you additional revenues, or simply fulfil your own campaign obligations.  By establishing certain user traits or demographics within your audience, we are able to target those individuals with the most relevant advertising (tied into their common characteristics), or simply reach those same users in a different environment.”  Or Audience Science’s UK office that explains “While other behavioural targeting technologies simply track page visits, the AudienceScience platform analyzes multiple indicators of intent:

•  Which pages and sections they have visited

•  What static and dynamic content they have read

•  What they say about themselves in registration data

•  Which search terms they use

•  What IP data indicates about them, including geography, SIC code, Fortune 500 rank, specific Internet domains,   and more

Because AudienceScience processes so many indicators of intent, it enables you to create precisely targeted audience segments for advertisers.”  And Google, which knows that the UK is “arguably the most advanced online marketplace in the world” has carefully explained to its UK customers all the data they collect and make available for powerful online targeting.

The Notice, Choice and Education “Good Practice” scheme relies on an ineffective opt-out.  Instead of real disclosure and consumer/citizen control, we have a band-aid approach to privacy online.  The IAB also resorts to a disingenuous scare tactic when it suggests that without online marketing, the ability of the Internet to provide “content online for free” would be harmed.  No one has said there shouldn’t be advertising–what’s been said is that it must be done in a way which respects privacy, the citizen, and the consumer.   Clearly, the new IAB/UK code isn’t a model that can be relied on to protect the public.  UK regulators must play a more proactive role to ensure privacy and consumer welfare online is meaningfully protected.

UK Mobile Marketing Deal will “revolutionise the way advertisers traditionally target audiences” [Annals of Mobile Marketing/UK/EU Division]

excerpt from press release:  “London: February 12th, 2009 – Gigafone, the leading mobile marketing solutions group, has announced that it has formed a partnership with Xtract…The new partnership promises to revolutionise the way advertisers traditionally target audiences. Xtract’s Social Links application identifies the social network structures within the customer base and finds the most influential people for marketers to target.  When incorporated into Gigafone’s targeted mobile marketing solution, where consumers can choose the type of ads they want to receive in return for incentives such as discount vouchers or free mobile minutes, the result is a completely new level of customer experience and a tangible tool for increasing the effectiveness of targeted marketing activities and measuring return on investment…

About Xtract
Xtract refines social interaction, behaviour and demographic data to create accurate 3D user profiles. These profiles for the first time utilise data as a dynamic tool in the day-to-day marketing for effective and intelligent targeting of marketing campaigns and advertising. Xtract’s Social Links is an automated, self-learning solution capable of analysing billions of mobile transactions with easy to use and actionable tools for operators to define accurate target groups for their marketing campaigns.”

MySpace Exec on its ad hypertargeting system: We have “massive amounts of data” on our users (and an example using Pepsi)

Excerpt.  on MySpace CEO Chris DeWolfe presentation.  via paidcontent.org:  “MySpace has 76 million unique online users in the US, and 139 million users worldwide; 40 percent of all Americans based in the US are on mySpace…MySpace has been working on its monetization technology currently used online called Hypertarget, which is five algorithms that basically segments the “massive amounts of data” on mySpace users into “enthusiast buckets.” Currently, they have their audience divided into over 1,000 of these segments, and for example, if Pepsi wants to target alternative music users they can serve them up an ad. Said DeWolfe, “It’s incredibly effective, and increases our yields.” This will be moving onto mobile.”

Porsche Teams with Yahoo for Mobile Behavioral Ad Targeting [Annals of Mobile Marketing]

Excerpt from Ad Age:

“…in just a 4-month-long pilot run, mobile outperformed Porsche’s wider campaign…The carmaker used Yahoo behavioral targeting tools to serve Porsche ads to smartphone users whose web-surfing behaviors had indicated they were in the market for coupes, SUVs, convertibles or luxury cars.”

source:  Mobile Effort Gets More to Say `I Can’ Purchase a Porsche.  Rita Chang.  Ad Age.  February 9, 2009 [sub. required]

more on Yahoo and behavioral targeting

Facebook, Advertising, Third-Party $Apps, Terms of Service, Data Collection & Privacy

The role that third party developers play accessing user data on social networks such as Facebook has long been a privacy concern for us.  The business practices, including data collection, profiling and targeting that form the basis of social networking “monetization” strategies are hidden from public view.  My CDD and USPIRG, in our various privacy complaints to the FTC, asked the agency to examine this area.  Maybe the new Obama FTC will do so.  But for now, here’s some excerpts from Facebook’s advice “on common business models” to application developers, as well as from its list of “third party developers” involved in social media marketing:

“As you think about building your app on Facebook, we want to help by highlighting some keys ways of thinking about your app as a business… Apps that are meaningful, trustworthy and well designed have real staying – and monetizing – power… we host a Platform with instant access to more than 175 million active users… Once you’ve created a sustainable, engaging social application, there are many different ways to help monetize it… Advertising: We at Facebook have had success serving targeted advertisements to our users based on information we know about them. By leveraging the data we give you access to (as detailed in our Developer Terms of Service) and data users share with you directly as a part of your application experience, you can serve highly relevant ads… Virtual Credits / Virtual Goods:… instead of accepting payments directly from users for subscriptions or virtual goods, some applications instead allow users to complete affiliate offers by filling out surveys or agreeing to try new products. There are a number of providers who consolidate these types of offers…
Third Party Providers to Help You Monetize:

Advertising:
AdParlor:  “Over 500 Million users worldwide are on a social networking site. These users are comfortable sharing their age, gender, and location, and can be reached through targeted advertising.”…
Shopitmedia: “you can target based on:
1. Location
2. Gender
3. Age
4. Application Category”…
Affiliate marketing…
Analytics…

Payments

Baby Steps for Online Privacy: Why the FTC Self-Regulatory Principles For Online Behavioral Advertising Fails to Protect the Public

Statement of Jeff Chester, Exec. Director, Center for Digital Democracy:

The Federal Trade Commission is supposed to serve as the nation’s leading consumer protection agency.  But for too long it has buried its mandate in the `digital’ sand, as far as ensuring U.S. consumer privacy is protected online.    The commission embraced a narrow intellectual framework as it examined online marketing and data collection for this proceeding.  Since 2001, the Bush FTC has made industry self-regulation for privacy and online marketing the only acceptable approach when considering any policy safeguards (although the Clinton FTC was also inadequate in this regard as well).  Consequently, FTC staff—placed in a sort of intellectual straitjacket—was hampered in their efforts to propose meaningful safeguards.

Advertisers and marketers have developed an array of sophisticated and ever-evolving data collection and profiling applications, honed from the latest developments in such fields as semantics, artificial intelligence, auction theory, social network analysis, data-mining, and statistical modeling.  Unknown to many members of the public, a vast commercial surveillance system is at the core of most search engines, online video channels, videogames, mobile services and social networks.  We are being digitally shadowed across the online medium, our actions monitored and analyzed.

Behavioral targeting (BT), the online marketing technique that analyzes how an individual user acts online so they can be sent more precise marketing messages, is just one tool in the interactive advertisers’ arsenal.  Today, we are witnessing a dramatic growth in the capabilities of marketers to track and assess our activities and communication habits on the Internet.  Social media monitoring, so-called “rich-media” immersive marketing, new forms of viral and virtual advertising and product placement, and a renewed interest (and growing investment in) neuromarketing, all contribute to the panoply of approaches that also includes BT.  Behavioral targeting itself has also grown more complex.  That modest little “cookie” data file on our browsers, which created the potential for behavioral ads, now permits a more diverse set of approaches for delivering targeted advertising.

We don’t believe that the FTC has sufficiently analyzed the current state of interactive marketing and data collection.  Otherwise, it would have been able to articulate a better definition of behavioral targeting that would illustrate why legislative safeguards are now required.  It should have not exempted “First Party” sites from the Principles; users need to know and approve what kinds of data collection for targeting are being done at that specific online location.

The commission should have created specific policies for so-called sensitive data, especially in the financial, health, and children/adolescent area.  By urging a conversation between industry and consumer groups to “develop more specific standards,” the commission has effectively and needlessly delayed the enactment of meaningful safeguards.

On the positive side, the FTC has finally recognized that given today’s contemporary marketing practices, the distinction between so-called personally identifiable information (PII) and non-PII is no longer relevant.  The commission is finally catching up with the work of the Article 29 Working Party in the EU (the organization of privacy commissioners from member states), which has made significant advances in this area.

We acknowledge that many on the FTC staff worked diligently to develop these principles.  We personally thank them for their commitment to the public interest.  Both Commissioners Leibowitz and Harbour played especially critical roles by supporting a serious examination of these issues.  We urge everyone to review their separate statements issued today.  Today’s release of the privacy principles continues the conversation.  But meaningful action is required.  We cannot leave the American public—now pressed by all manner of financial and other pressures—to remain vulnerable to the data collection and targeting lures of interactive marketing.

FTC’s Behavioral Ad Principles–the last act of the Bush Administration? Why is the Obama White House Allowing the FTC To Remain Under the Leadership Appointed by Pres. Bush?

In a few hours, approximately between 10-11 am eastern, the FTC is expected to release its final “Online Behavioral Advertising Principles.” Originally released for comment in December 2007, the principles are a sort of Valentine’s Day present to the online ad industry from the (supposedly departed) Bush Administration.  From what we know, the FTC principles support self-regulation.  Online marketers will be told they should behave better–and here are suggestions.  It’s like a teacher telling a misbehaving student–‘behave better, dear,’ or else we will have to tell your parent (in this case, the guardian being potential congressional action).

My CDD urged Commissioners Harbour and Leibowitz to issue separate statements on the principles, and call for tougher requirements—especially in the area of so-called sensitive information.  This would include data connected to our financial and health related online activities (think mortgage and loan applications or queries for prescription drugs).  CDD and a coalition of groups also formally asked the commission to impose serious privacy safeguards for both children and adolescents.

But these principles were crafted within the narrow confines of the Bush Administration philosophy prevailing at the FTC.  Only self-regulation is permitted.  Consequently, such an approach likely means these rules leave the online data collection, profiling and targeted marketing system which comprise behavioral marketing off the privacy protection hook.

But one question looms at the moment.  Why has the new Obama administration allowed the FTC to remain under the leadership of Bush-appointee William E. Kovacic? The principles being issued today, in fact, reflect the “old” FTC, not one run under the philosophy of President Obama.  Why is the Obama White House failing to ensure a change of leadership at the FTC?  The agency is responsible for overseeing a huge portion of the economy, including critical financial issues.  It’s also supposed to be the leading agency on consumer protection issues.   The Obama White House should have–by now-found someone who would led the FTC, so it can better protect the public.

The principles being released today were only made possible because of the Bush FTC give-away to Google, when it approved its takeover of online ad giant DoubleClick.  CDD, the Electronic Privacy Information Center (EPIC), and USPIRG fought the merger, including on privacy grounds.  FTC Commissioner Pamela Harbour played a key role forcing the agency (then run by Chairwoman Majoris, whose husband’s law firm represented DoubleClick) to address the privacy concerns. As a consequence of the political pressure from its failure to seriously examine the consumer privacy issues of the Google deal, the FTC staff were told to develop these principles.

The next chair of the FTC needs to take privacy and online consumer protection issues seriously.  The agency does need more resources, but also a new spirit.  If the FTC had been on the job, and was examining how lending institutions were recklessly promoting loans and mortgages, maybe today’s mess wouldn’t be as tragic as it is.  More to come after the commission releases the principles.

Google Latitude, Privacy and Mobile Marketing

Google’s new application called Latitude is just one of a growing number of efforts that help extend social networking into the mobile space.  But its role is also to help further develop Google’s online marketing and advertising apparatus into what will be a very lucrative mobile space.  After all, Google CEO Eric Schmidt declared in 2007 that the biggest opportunity online was “Mobile, mobile, mobile — it’s probably the most wide open space out there right now. Also, local. Most search companies don’t take advantage of the local data inherent in the web.”  Last year, in an interview with a German newspaper, Mr. Schmidt explained that “The next big wave in advertising is the mobile internet.”

Latitude fits in with Google’s plans to expand its mobile marketing business, and this should raise both privacy and consumer protection issues.   Reporters covering the online ad business spotted Latitude as a move by Google to broaden its mobile marketing clout.  For example, Laurie Sullivan from MediaPost noted that:

“Google came one step closer Wednesday to providing brands with a one-to-one mobile marketing and ad tool that speaks directly to consumers. The company, which dominates in the mobile mapping space, launched an add-on social network service called Latitude.

And while the service clearly aims to focus on social networking–connecting friends and family by sharing their whereabouts–the application could easily adopt mobile marketing applications that target users with special deals and ads at specific locations such as in front of Starbucks or McDonald’s as they drive or walk down the street…Industry insiders are not convinced the service will stop with a social network service to connect with friends and family. The social network is the next logical step for Google to further its mobile services–mapping, networking and advertising–but the technology makes location-based advertising a real possibility… said Dave Tan, VP of content solutions at Resolution Media, an Omnicom Media Group company. “Mobile advertising tethered to GPS/cell-tower based location information has tremendous opportunities…”  

Writing on AdAge.com, one marketer explained that “Google’s merging of a utility like Google maps with social networking is a great opportunity for marketers. Until now, social apps like those on Facebook and MySpace were used when primarily when one wasn’t doing anything else, making advertising to that person difficult for driving call to action. With Google Latitude, social networking is integrated into tools that people use while doing something or seeking something.

Of interest too was the announcement this week by Google Health partner Anvita Health that it was introducing “a new mobile viewer for Google Health that is built on the Android platform..The Anvita Mobile Viewer enables users of Google Health to view their Google Health profile data from Android-powered devices…This allows for on-demand and real-time view of their medical records anytime and anywhere and provides for more flexibility when visiting physicians, pharmacists, and other care provide…Anvita Health provides innovative health care analytics to its customers who, in aggregate, manage more than 50 million lives.”

Google should acknowledge whether Latitude will eventually be linked to marketing, and also if it is collecting any analytical data when users agree to use it.  For example, what kind of mobile health marketing does Google plan to do, and will it be connected to Latitude?  One of the frustrating things about Google is that it always attempts to frame what it does for the public as some beneficent gift.  It’s privacy PR video for Latitude describes the service as a “fun, useful feature.”  It should be more forthright about its plans for mobile marketing, and should develop a system which clearly informs users how the data will be collected and used.  Google should also more closely examine how to empower mobile users so they have real control of what data is collected–including what is used for marketing and advertising purposes.  But we are working to get the FTC to actually develop safeguards for this mobile marketplace, including ensuring “opt-in” really gives users knowledge and control.
PS:  It never hurts to see what Google is telling major advertisers they can do via its DoubleClick Mobile: “Now publishers can deploy mobile advertising with the same confidence and control as online display ads…gives you all the power you need to deliver truly effective mobile campaigns. When creating your ad, you can make use of link text, jump pages and roadblock pairing to deliver greater impact…DoubleClick Mobile enables you to manage and report on your mobile advertising campaign through every click. We’ve made it easy to set campaign dates, define mobile specific targeting criteria and get full reports on all mobile campaigns.”