May 17th, 2011
FTC's Vladeck: More Privacy Actions On The Way
Online Media Daily
The Federal Trade Commission consumer protection chief David Vladeck delivered a message on Monday to online ad companies: New enforcement actions are in the works.
“The FTC will step in when false or misleading privacy claims have the effect of undermining consumer choices,” Vladeck said at an industry conference about ad networks and exchanges. He added that the commission recently reached settlement agreements with Twitter, Google and the ad network Chitika for allegedly “making deceptive claims about the privacy of the information they collect.”
In Chitika’s case, the ad network offered users the opportunity to opt out of online behavioral targeting, but the opt-out cookie lasted for only 10 days. “We were not happy with Chitika,” Vladeck said. “There are more cases to come.”
Vladeck also discussed the FTC’s proposal for a universal do-not-track mechanism. Do-not-track, Vladeck said, need not require new legislation if the industry can include five components. Four of them are relatively straightforward: The mechanism must be easy for consumers to use, effective, universal and persistent.
The fifth component, however, has proven to be more complex: A do-not-track mechanism must allow users to avoid the collection of their data, not just its use.
This requirement, Vladeck said, stems from the concern that data that is initially collected for advertising purposes might end up being used for other, secondary purposes that consumers don’t want.
“Can my health insurer learn that I spend a lot of time online browsing for deep fat fryers?” Vladeck said. “We’ve asked these questions repeatedly. We haven’t yet gotten a clear answer. Until we get an answer to our questions about secondary uses, we cannot support an opt-out mechanism that opts consumers out of ads but allows data to be collected for secondary purposes.”
At the same time, he said, the FTC believes there should be an exception to the no-collection rule when the data is being gathered for “commonly accepted practices.” Defining them, however, is proving difficult, especially when it comes to analytics.
Read more: http://trap.it/EzGkB5