Computers, Privacy & the Constitution

View   r3  >  r2  ...
JonathanBonillaFirstPaper 3 - 10 Mar 2009 - Main.JonathanBonilla
Line: 1 to 1
 
META TOPICPARENT name="FirstPaper%25"
Line: 11 to 11
 

History and Current Regulatory System

Changed:
<
<
Under the current system of US regulation, online behavioral advertising is monitored by the Federal Trade Commission (FTC). 15 U.S.C. §45 (a) provides a broad statutory mandate for the FTC to prohibit “deceptive acts or practices in or affecting commerce.” This has been interpreted by the FTC to implicate situations where companies collect or use customer data in a manner contrary to that company’s stated privacy policy, which is punishable as an unfair or deceptive practice. As a result of this interpretation, the FTC assumed jurisdiction in this area and has since been closely following the development of online behavioral advertising.
>
>
Under the current system of US regulation, online behavioral advertising is monitored by the Federal Trade Commission (FTC). 15 U.S.C. §45 (a) provides a broad statutory mandate for the FTC to prohibit “deceptive acts or practices in or affecting commerce”[1]. This has been interpreted by the FTC to implicate situations where companies collect or use customer data in a manner contrary to that company’s stated privacy policy, which is punishable as an unfair or deceptive practice. As a result of this interpretation, the FTC assumed jurisdiction in this area and has since been closely following the development of online behavioral advertising.
 
Changed:
<
<
Regulation in this field began in 1998, when the FTC presented to Congress a report containing the “core principles of privacy protection” to guide industry practice. These core principles included notice to consumers regarding what is collected, choice to consumers as to how it will be used, consumer access to the collected data, security of the collected data, and enforcement mechanisms (self-regulatory, private remedy, government enforcement) for the principles. However, this report merely presented possibilities for regulation, and no further action was taken at the time, despite the report’s conclusion that there is “real need for implementing the basic fair information practices.” Further reports were sent to Congress, such as in 2000, when the FTC asked for legislation to support an otherwise self-regulatory scheme for online behavioral advertising, based on the 1998 report’s core principles. Congress failed to enact this legislation, though the self-regulatory scheme took off, using the newly-created Network Advertising Initiative (NAI) to enforce the core FTC principles. NAI represents roughly 90% of the advertising industry.
>
>
Regulation in this field began in 1998, when the FTC presented to Congress a report containing the “core principles of privacy protection” to guide industry practice [2]. These core principles included notice to consumers regarding what is collected, choice to consumers as to how it will be used, consumer access to the collected data, security of the collected data, and enforcement mechanisms (self-regulatory, private remedy, government enforcement) for the principles. However, this report merely presented possibilities for regulation, and no further action was taken at the time, despite the report’s conclusion that there is “real need for implementing the basic fair information practices.” Further reports were sent to Congress, such as in 2000, when the FTC asked for legislation to support an otherwise self-regulatory scheme for online behavioral advertising, based on the 1998 report’s core principles [3]. Congress failed to enact this legislation, though the self-regulatory scheme took off, using the newly-created Network Advertising Initiative (NAI) to enforce the core FTC principles. NAI represents roughly 90% of the advertising industry [4].
 
Changed:
<
<
The FTC did not re-examine this issue until 2006, when it began holding hearings to determine future action relating to online behavioral advertising. A series of updated principles were created and then altered over the next several years, based on input from privacy advocates and advertisers, alike. Throughout this time period, as well, Congress has failed to legislate on the issue.
>
>
The FTC did not re-examine this issue until 2006, when it began holding hearings to determine future action relating to online behavioral advertising. A series of updated principles were created and then altered over the next several years, based on input from privacy advocates and advertisers, alike [5]. Throughout this time period, as well, Congress has failed to legislate on the issue.
 

Problems and Possible Solutions

Line: 27 to 27
 One possible solution would be to require express assent prior to collecting or using any personal information (FTC guidelines already require express assent for use of “sensitive data”). However, the same problem arises here as did before: much like it is common for users to click-through a EULA without reading it, prior to installing a computer program, it would seem likely that users would also not pay much attention to a large wall of text describing the details of a website’s privacy policy, when all the user wants to do is get to the content of the website as quickly and easily as possible.
Changed:
<
<
In such a situation, where ease of computing is a large factor, it would appear that a statutory solution in limiting the specific uses of certain information would be warranted. Unfortunately, being that Congress has neglected to enact such on multiple occasions, the only remaining option would be a state-by-state approach. Indeed, several states in 2008 already proposed bills relating to the regulation of behavioral advertising. Massachusetts, for instance, was able to pass their version, though it primarily deals with safeguarding personal information once it has been obtained by the advertisers.
>
>
In such a situation, where ease of computing is a large factor, it would appear that a statutory solution in limiting the specific uses of certain information would be warranted. Unfortunately, being that Congress has neglected to enact such on multiple occasions, the only remaining option would be a state-by-state approach. Indeed, several states in 2008 already proposed bills relating to the regulation of behavioral advertising. Massachusetts, for instance, was able to pass their version, though it primarily deals with safeguarding personal information once it has been obtained by the advertisers [6].
 As online behavioral advertising is a rapidly expanding process, these developments are certainly noteworthy to all online consumers.
Changed:
<
<
(Word Count: 965) (Citations to be added)
>
>
(Word Count: 969)

[1] http://www4.law.cornell.edu/uscode/15/45.html

[2] http://www.ftc.gov/reports/privacy3/priv-23a.pdf

[3] http://www.ftc.gov/os/2000/07/onlineprofiling.pdf

[4] http://www.networkadvertising.org/index.asp

[5] http://www.ftc.gov/os/2009/02/P085400behavadreport.pdf

[6] 201 CMR 17.00

 
# * Set ALLOWTOPICVIEW = TWikiAdminGroup, JonathanBonilla

Revision 3r3 - 10 Mar 2009 - 01:11:15 - JonathanBonilla
Revision 2r2 - 09 Mar 2009 - 16:27:13 - JonathanBonilla
This site is powered by the TWiki collaboration platform.
All material on this collaboration platform is the property of the contributing authors.
All material marked as authored by Eben Moglen is available under the license terms CC-BY-SA version 4.
Syndicate this site RSSATOM