Microsoft’s Research into Behavioral Targeting & Profiling via its Beijing Research Lab

There’s a “Great Digital Game” going on, where companies such as Google, Facebook, Microsoft and leading ad agencies compete to expand the clout of online marketing around the globe.  As I told EU and other privacy regulators last Friday, the Obama Administration is being pressed by US online marketers to forge trade deals that will allow the leading companies to conduct business in the  Asia-Pacific and EU region without worrying about serious privacy and consumer protection rules.  I do think it’s ironic–and really misleading–to point to online marketing as a U.S. economic success story that requires special treatment.  The revenues generated by Google, Facebook and the others are principally from advertising.  Whether they are truly models of innovation that will bring the kind of sustainable long-term job and economic growth we need is questionable.

At the core of the “Great Digital Game”–where U.S. companies strive to dominate the global interactive ad marketplace–is data collection for user targeting.  Microsoft, which has a principal online ad research facility in Beijing, was recently seeking a Senior Data Mining Analyst.  Read this excerpt from the job description and think about privacy, civil liberties in China and other autocratic regimes, consumer protection and the ethical role of U.S. online ad companies:  “Microsoft Ad Platform China is building world-class engineering teams in Beijing, focusing on online Ads related systems and services such as behavior targeting and advertiser analytics. The team partner closely with the Redmond Ad Platform team, enabling the discovery and inference of user profiles, intent and interaction while respecting privacy and trust, with the ultimate goal of maximizing benefits for users, advertisers and publishers…Core Job Responsibilities: Conduct and manage applied research and modeling work in the areas of user segmentation, profiling, and targeting. Research and experiment on data mining algorithms for user segmentation and dynamic segment expansion. Utilize data mining technologies and use various data sources, some of which may include MSN/Windows Live web usage, search query, demographic, subscription, and 3rd party data, to gain insight into Internet user behavior and intent that will set the foundation for Microsoft targeting offerings and data services. Provide complete solutions to business problems using data mining techniques, statistics and data analysis. Serve as subject matter expert and drive thought leadership in the areas of user profiling, ad targeting, and personalization for Microsoft online services.”

Google’s Eric Schmidt on Mobile Marketing [Annals of Why We Need Mobile Privacy and Consumer Protection Safeguards]

Google CEO Eric Schmidt gave the keynote address at the Interactive Advertising Bureau’s “Ecosystem 2.0” conference.  As reported, he explained that [our emphasis]:

“The smartphone is the iconic device of our time,” Schmidt told the record IAB audience of 750 in Palm Springs, California. A year ago, he added, he predicted that mobile use would surpass PCs within two years. “It happened two weeks ago. And the PC is not going to catch up,” Schmidt said, as he labeled the new era, “Mobile First.”…The hyperlocal potential of mobile, Schmidt continued, means that smartphones and tablets bring a practical application to marketing that no other medium can match: A connection that will lead you to the store, open the door, and direct you to a product you need. “A RadioShack ad can tell you where you are and how to get to the nearest store.” And equipped with Near Field Communication chip (NFC), the newest generation of smartphones not only can tell you what to buy, it can enable a tap-and-pay transaction…Think of the offers mechanisms for advertisers,” Schmidt offered. “We’ve spent 20 years trying to get here. And now there’s an explosion in commerce. Particularly for the consumer who says, “I want to buy something and want to buy it right now,” he added, “We can do it.”

And, in large part, that capability means that mobile media consumption “is happening faster than all our internal predictions.”

Some 78% of smartphone internet users already use their smartphones as they shop. And, as consumer comfort with – and acceptance of – new mobile technology continues, Schmidt envisions “a world, in the very near future, where computers remember things and you never need to worry about forgetting anything. You want it to remember something and it will. And you’re never lost. No one is ever lost. You never turn off the [mobile device] and you’ll always know where you are. And where you want to go….”

NTIA’s Strickling on Privacy: He Forgets Consumers!

Here’s an excerpt via Politico from their interview with Department of Commerce NTIA Chief–and potential privacy policy maven–Lawrence Strickling.  Note the absence of consumers in his description of the problem and issues.  The Commerce Department, which is jockeying to have a greater role in the privacy debate (which the largest data collectors like because they are afraid of the consumer watchdog-minded FTC), better start making consumer needs come first–if they are to have any credibility here in the U.S. and with the EU.   It appears from the interview the Commerce Department has largely made up its mind to rely on “voluntary enforceable codes of conduct.”   Here’s what Larry said in a Q & A:

NTIA is also getting into the privacy discussions.

It’s part of the larger Internet Policy Task Force that’s underway here at Commerce where our agency — along with other agencies — is looking at a number of Internet policy issues. Privacy is first and foremost on the list, but we’re also looking at the protection of intellectual property, cybersecurity, and we’ll be looking at the free flow of information. For Commerce, our theme links all these topics around the notion of innovation, preserving the job creation and business expansion aspects of the Internet and trying to protect that going forward. So in the area of privacy, the task force did issue the green paper late last year. Comments just came in on that, so people are starting to work their way through them, with the goal that we’ll take the green paper and turn it into a more final pronouncement of the Department of Commerce or perhaps even the administration’s policy on privacy later this spring.

Do you think there should be a government office specifically dedicated to privacy?

We certainly believe that if we’re going to move forward with these voluntary enforceable codes of conduct with the industry that the function of convening and organizing that process should sit [in the government]. Our believe is that the Department of Commerce, and in particular NTIA, is the appropriate place for that function to reside. When we start talking about offices that sounds more bureaucratic and maybe requires departmental administrative orders. But on the issue of making sure that function is done, yes, based on what we see in the comments, we think that’s an appropriate idea. We think it’s a necessary idea in terms of working with industry and we’ll see how this all plays out over the course of the spring.

What is NTIA doing internationally on the privacy front?

Privacy has big international implications because the Council of Europe is looking at redoing what they’ve done in privacy. The European Union is looking at this issue. OECD is looking at the issue. So we’re very cognizant of the need to make sure our policy, whatever it is, is designed in a way to best harmonize with what’s happening in the rest of the world, and in particularly Europe.

Arianna Huffington’s AOL Privacy Problem–Will She Be a “Progressive” and Limit Behavioral Targeting?

Ms. Huffington’s HuffPost used behavioral targeting and other forms of interactive marketing to help make the news site successful.  At HuffPost, the privacy issues involved with such practices were never seriously addressed.  But now Ms. Huffington has a new role as the editorial executive for AOL’s content service.   But AOL is engaged in extensive and manipulative forms of behavioral targeting–including the pervasive online targeting of teens, African Americans, health and medical consumers and patients, for financial service products, etc.  Like other online marketers, AOL claims such online tracking, profiling and targeting isn’t really personally identifiable–which is both inaccurate and deceptive.  We challenge Ms. Huffington to engage in a serious journalistic investigation of AOL’s privacy practices and redress them.  There should be absolutely no targeting of adolescents.  Behavioral targeting of African-Americans, financial and health products should be by prior opt-in consent only.  Ms. Huffington should be held responsible for AOL’s privacy and online marketing practices–and we expect her to address them as she increasingly plays a greater leadership role in the online ad industry.  Meanwhile, here’s what AOL says it does using behavioral targeting focused on African-Americans:

Behavioral. Target consumers based on their interests:

  • Black Voices. People who visit Black Voices for the latest in news, entertainment, sports, lifestyle, careers, money and more.
  • You can target the following subsections of the Black Voices audience:
  • Auto Intenders. In-market car, truck or motorcycle shoppers who are looking for specific makes and models. They read reviews, look at pricing and features, and research financing options.
  • Die Hard Sports Fans. Dedicated fans who follow professional and collegiate sports, stay on top of player rankings, and shop for sports memorabilia.
  • Entertainment Buffs. People who follow the latest news about celebrities, movies, music and soaps. They purchase DVDs, music and video games online and also take an active interest in memorabilia.
  • Money Minders. Affluent, older individuals who are seeking online financial advice, checking the performance of their investments, getting tax advice, planning their retirement and researching insurance options.
  • Moviegoers. Movie buffs who read the latest reviews, follow celebrity gossip and purchase tickets/DVDs online.
  • Travelers. Personal and business travelers who are interested in travel advice and deals. They use the internet to purchase airline tickets, book accommodations, make car reservations and research financing options.

Accurate. Pinpoint your customers with other powerful targeting solutions:

  • Develop a custom audience segment modeled after visitors to your site (Look-Alike Modeling).
  • Find African American households that have the greatest propensity to purchase specific products or brands (MRI Lifestyle Clusters).
  • If you’re sponsoring an AOL page, retarget consumers who have visited it (Sponsorship LeadBack).
  • Find your ideal African American audiences on the sites they are most likely to visit (Subnet Targeting).
  • Find AOL members who have selected the AOL Black Voices Welcome Screen as their homepage option, or who have indicated (through third party data) that someone in their household is of African American ethnicity (Audience Rosters).

and its behavioral targeting of consumers looking for mortgages and other financial products:

Behavioral. Target consumers based on their interests:

  • Business Decision Maker. Individuals with an active interest in business news and strategy.
  • Money Minders. Affluent, older individuals who are seeking online financial advice, checking the performance of their investments, getting tax advice, planning their retirement and researching insurance options.
  • Real Estate Intender. In-market individuals looking to buy, sell or rent property.
  • Small Business Owner. Small business professionals shopping for real estate, health care and office and computer equipment.
  • Investors. Affluent individuals who read business news, evaluate stocks, seek financial advice and conduct trades online.
  • Insurance Intender. Individuals seeking information about life, auto, home or health insurance.
  • Mortgage Intender. Individuals seeking information about mortgage rates and/or home loans.

and AOL’s adolescent targeting [for shame!]:
Behavioral. Target consumers based on their interests:

  • Active Gamers. Teens and adults looking for online and console game strategies, tracking game release dates and purchasing video games.
  • Television Watchers. Individuals who keep up with their favorite television shows via TV network sites and online communities.
  • Style Mavens. Trend-focused women interested in the latest fashion, jewelry, and health and beauty items. They like to feel as good as they look by also paying attention to diet and fitness. 
  • AIM Audience. Individuals who have visited AIM properties.

Statement of Jeff Chester on the Department of Commerce’s Internet Policy Task Force Privacy and E-Commerce: a Bill of Behavioral Targeting “Rights” for Online Marketers?

The Obama Administration asks some important questions about protecting the privacy of U.S. consumers.  But given the growth of online data collection that threatens our privacy, including when consumers are engaged in financial, health, and other personal transactions (including involving their families), this new report offers us a digital déjà vu.   The time for questions has long passed.

Instead of real laws protecting consumers, we are offered a vague “multi-stakeholder” process to help develop “enforceable codes of conduct.”  If the Commerce Department really placed the interests of consumers first, it would have been able to better articulate in the report how the current system threatens privacy.    They should have been able to clearly say what practices are right and wrong—such as the extensive system of online behavioral tracking that stealthily shadows consumers—whether on their personal computer or a mobile phone.   The paper should have firmly articulated what the safeguards should be for financial, health and other sensitive data.  The report should have rejected outright any role for self-regulation, given its failures in the online data collection marketplace.  While the report supports a FIPPS framework, these principles can be written in a way that ultimately endorses existing business practices for online data collection and targeting.

This illustrates one of the basic problems with the Administration’s approach to protecting consumer privacy online.  The Commerce Department is focused on promoting the interests of industry and business—not consumers.  It cannot play the role of an independent, honest broker; consequently it should not be empowered to create a new Privacy Policy Office.   Having the Commerce Department play a role in protecting privacy will enable the data collection foxes to run the consumer privacy henhouse.  We call on the Administration and Congress to address this issue.  A new Privacy Policy Office should be independent and operate under the Administrative Procedures Act—ensuring there are safeguards for meaningful public participation and transparency.

The Commerce paper’s real goal is to help U.S. Internet data collection companies operate in the EU, Asia/Pacific and other markets as “privacy-free” zones.  Under the cover of promoting “innovation” and trade, I fear the U.S. will craft a crazy-quilt code of conduct regimes that they will claim should pass muster in the EU (which has a more comprehensive framework to protect privacy).  The Obama Administration appears to be promoting a kind of “separate, but equal” framework, where it will argue that no matter how weak U.S. privacy rules are, other countries should accept them as the equivalent of a stronger approach.  The new paper should have acknowledged the U.S. has to play catch-up with the EU when it comes to protecting consumer privacy.

We have been promised meetings with the new White House subcommittee on privacy, where consumer and privacy groups will raise these and other concerns.

IAB Gets a new Chance to Play Constructive Role as Randall Rothenberg Goes to Time Inc.

The departure of Randall Rothenberg, the head of the Interactive Advertising Bureau, provides a critical opportunity for the IAB to revisit its position on protecting consumer online privacy (including Do Not Track).  Under Mr. Rothenberg, the IAB lobbied Congress to restrict the FTC’s ability to protect consumers, including on privacy.  With new leadership, the IAB could begin playing a more constructive role by working with consumer groups to build a consensus on federal privacy rules.  Instead of confrontation and denial, we hope the online ad lobby pursues serious engagement with privacy advocates.   The IAB has become just another inside the Beltway lobbying group–and has lost credibility among many policymakers.  A new IAB leader should be someone who can really help the mission of the industry by engaging in the kind of diplomacy and debate that supports the higher purposes of online advertising, digital publishing, and the public interest.
At Time, Mr. Rothenberg will now be in charge of its online ad network, which uses behavioral targeting and other interactive data techniques.  How Time responds to the growing call for better consumer privacy will be one of Mr. Rothenberg’s new challenges.

Neuromarketing & Privacy: German Data Protection Authority Enacts Safeguards

We have long been sounding the alarm over the role of neuromarketing in advertising, especially for online marketing.  We are gratified that the Data Protection Authority in Hamburg Germany, according to this law firm post, just imposed safeguards on the role of neuromarketing.  It explains that [excerpt]: “[O]n November 23, the data protection authority (DPA) of the German Federal State of Hamburg imposed a €200,000 fine [link in German] against the Hamburg-based savings & loan Hamburger Sparkasse due to violations of the German Federal Data Protection Act (the BDSG) for, among other reasons, using neuromarketing techniques without customer consentIndeed, according to the head of the Hamburg DPA, Prof. Johannes Caspar, the intent was to send a clear signal to the market against the use of modern neuromarketing and comparable methods in violation of data protection law.  The case also clearly illustrates that German regulators are willing to enforce the new data protection regime and are well prepared to impose significant fines upon companies rather than giving them merely a warning notice…The decision of the Hamburg DPA may also attract attention beyond Germany and influence the interpretation of data protection laws in other countries, in particular with respect to the compliance of neuromarketing and brain sciences techniques with data protection laws.  Due to the sensitivity of such activities, it is likely that regulators in the EU will follow the approach taken by the Hamburg DPA.”

Five Ways to Protect Privacy

[a version we wrote of this ran in Multichannel News]
Five Ways for Digital Marketers to Protect Consumer Privacy

If George Orwell were writing today, 1984’s Winston Smith would be working as a “Doublespeak” specialist crafting privacy policies and creating self-regulatory regimes.  That’s not what consumers and citizens need in the interactive marketing era.   All Americans should have their privacy respected and protected when they go online—including when they use mobile phones.

1.     Tell your users what you actually say to your advertisers—about how the profiling and targeting process really works.  There is a disconnect that is unfair and deceptive between what companies say in their privacy policies and pitch to their clients and potential partners.   Be honest about the “360 degree” ways you engage in online marketing.

2.     Don’t collect information and target consumers based on their interests in finance and health.  These two most “sensitive” categories should be opt-in only.   When consumers go online for loans, credit, mortgages, and health concerns they require the upmost privacy.  Although online financial, health and so-called lead-generation advertising is big business, consumers should not be forced to have their online financial and health behavior stealthfully-tracked and compiled.  The risks to consumers are great if we don’t develop special rules for this data.

3.     Racial and ethnic profiling data should also be opt-in. Hispanics, African-Americas, Asian-Americans and other minorities are increasingly the focus of a growing behavioral targeting and online marketing apparatus.  In the “offline” world, we have witnessed a disturbing use of racial profiling practices to discriminate against individuals.  In today’s online environment, users are being identified as being a member of a racial or ethnic group without either their awareness or consent.  While we all want to see the growth of diversely owned online publishing, it should not be done at the expense of civil liberties in the digital era.  We must prevent the growth of online racial profiling, that when tied to income, geography and other data can be used to create 21st Century forms of discrimination.

4.     Don’t use neuromarketing and other subliminal and subconscious-based advertising.   Fortune 1000 advertisers and online marketers such as Microsoft, Yahoo and Google are using new forms of ad testing and development involving the latest tools of neuroscience, such as fMRI’s and EEGs.  Neuromarketing’s goal is to directly influence a consumer’s subconscious, and when combined with the power of online data targeting,  offers powerful—and frightening—new forms of manipulation.

5.     Users need to consent to having their profiles be bought and sold on so-called online ad exchanges.  Selling off the right to target a consumer online, via real-time auctions that happen in milliseconds, is dehumanizing.  Nor should we permit the growing combination of offline and online databases to be used for targeting, including via these new digital auction houses.

Interactive marketing is now a fundamental operating principle for the cross-platform media economy throughout the world.   But right now, it’s a digital “wild west” that doesn’t serve the interests of consumers, citizens and most marketers.

Behavioral Targeting is About Tracking an “Individual,” Explains Online Marketer

The online ad industry and lobby better stop saying that cookies and other forms of data collection aren’t personally identifiable–so-called PII [personally identifiable information].  As we know, behavioral targeting (BT) identifies, profiles, tracks and targets an individual.  Here’s just one example of how online marketers discuss what BT really is when they are talking among themselves and to clients (our emphasis):

What is behavioral targeting?
Behavioral targeting is a technique used by online advertisers to improve the effectiveness of their campaigns by increasing the relevance of product offers and promotions on a visitor-by-visitor basis.

Behavioral targeting uses information collected on an individual’s web-browsing behavior, such as the pages they have visited or the searches they have made, to select and deliver online ads to the users who are most likely to be interested…As the effective mixing and mining of audience data has become increasingly important to online advertisers, the role of behavioral targeting and retargeting have grown more central…The typical approach to behavioral targeting starts by using web analytics to group visitors into discrete channels. Each channel is analyzed and a virtual profile is created to for each channel…
Most platforms identify visitors by assigning a unique id cookie to each and every visitor to the site, allowing them to be tracked throughout their web journey.  An example is a user who visits content about auto insurance, clicks on an insurance advertiser button or banner, and then searches for “auto insurance.” This user would be assigned to the insurance prospect channel and the next time that user goes to Yahoo they will see ad for insurance…

What AOL Should Have Told Reps. Barton & Markey


AOL also describes to Reps. Barton and Markey the way they use cookies that doesn’t reflect what they say to clients--such as “Target users based on attributes from user registration or third-party data (e.g. age, gender, income, kids)… Retarget users who visit your website… Target users within households using Experian’s statistical modeling based on hundreds of offline data elements that are most predictive for defining the specific audience of consumers.” For question 1, they refer to their privacy policy—something few consumers would read or understand.  Nor does the privacy policy spell out how AOL collects and targets users, as they do for potential clients.  See and compare to privacy policy. See how they offer targeting based on political information.

Question 2:  They didn’t answer completely.  They should have included information from here. And what their partners collect.

Question 3.  They should have said they urge advertisers to use pixels, beacons and other tracking tools:   “Place pixels on all high-traffic pages… Target broadly… Most networks, including Advertising.com, look at IP or cookie data to determine if a user is part of a specific demographic or has demonstrated a particular online behavior, such as shopping for a car, browsing cooking sites, and so on. With user targeting, you reach those consumers directly, regardless of the sites they happen to be visiting.”

And they say that the third party cookies don’t identify the “specific user.”  But that’s what AOL says it can target:  “Target users within households… Retarget users who visit your website… Target users within households that demonstrate the highest propensity to buy certain products…”

Question 7.  They don’t say what they do.  It’s monetizing all the data:  “We monetize nearly 1.5 billion impressions per day on average.”

10.  They should have said how they target based on financial and health info.  They didn’t.  See its targeting for health, finance, teens, Hispanics, African-Americans.


14.   Users don’t have enough information on the process to really determine whether they should opt-out.  Nor is AOL’s opt-out really visible.