The online advertising industry and U.S. policy makers need to give online users more control over the collection of personal data and surfing habits beyond the traditional opt-out approach, some privacy advocates said Wednesday.
Dozens of online ad networks allow users to opt out of being tracked as a way to deliver behavioral advertising, and in most cases, the opt-out is stored in a cookie that goes away every time the users clear their browser cookies, privacy advocates said during a discussion of online advertising at the Computers, Freedom and Privacy Conference in Washington, D.C.
Some advertisers require that people opt out of targeted advertising every month, and some advertisers make the opt-out link difficult to find, said Christopher Soghoian, a fellow at the Berkman Center for Internet & Society at Harvard University. Some opt-out mechanisms aren't even functional, he said.
Soghoian, while creating a single opt-out mechanism for the Firefox browser, found more than 40 advertising networks, he said. "How can we expect consumers to visit 40 or 50 different online advertisers, opt out, then revisit these sites every six months or every year, and then, when they delete their cookies, go back again?" he asked.
Representatives of Google, Microsoft and the Interactive Advertising Bureau (IAB) all agreed that current opt-out mechanisms can be confusing. "You can't have 50 opt-out pages, we understand that," said Mike Zaneis, vice president for public policy at the IAB.
But about 30 ad networks, delivering around 90 percent of all online ads, are members of the Network Advertising Initiative, which offers a single opt-out cookie, Zaneis said.
Some audience members called on the U.S. government to require that advertising networks get opt-in approval before tracking Web behavior. One audience member suggested opt-out requirements are unfair business practices that should be investigated by the U.S. Federal Trade Commission.
But opt-in approval would require advertising networks to authenticate users, thus requiring ad vendors to collect more personal data, said Jane Horvath, Google's chief privacy counsel.
Only a small percentage of consumers will opt in to behavioral advertising, but such ads are a valuable tool, added Michael Hintze, associate general counsel at Microsoft. Targeted ads bring in four to 10 times the revenue of untargeted ads, he said.
Many ads aren't behavioral; some online advertising works with contextual ads based on the content of the Web page, Hintze said. An airline advertising on a travel Web site would be a contextual ad.
"If behavioral ads went away, there would still be ads online," Hintze said. "But in light of the fact that offline newspapers are going out of business left and right, when you think about content online like in-depth reporting on foreign policy issues or really important public policy issues, there's no product associated with that. What is the ad model that's going to support the development of that kind of content?"
Behavioral advertising is the only model that can support that kind of journalism, Hintze said. "Really, the only [model] I'm aware of is that in some cases, we can know that the person reading this in-depth article about our relationship with North Korea has an interest in sports," he said.
But Hintze and Horvath both said they'd support legislation from the U.S. Congress that clarified online privacy rules. More industry self-regulation and legislation are both needed, Hintze said.
He may get his wish. Representative Rick Boucher, a Virginia Democrat, has said he will push for legislation requiring opt-in approval for online tracking, and new FTC Chairman Jon Leibowitz has said he prefers an opt-in approach.
Privacy advocate Jeffrey Chester, executive director of the Center for Digital Democracy, called on the FTC and Congress to take action to protect U.S. consumers. Online ad companies are now researching neuroscience as a way to target users' on a subconscious level, he said.
"Individuals need to understand, in a concise way, the full range of data collection and analytical tools [online companies] are using,"
Comments
This article contains a quote that is incorrect.
"[A]bout 30 ad networks, delivering around 90 percent of all online ads, are members of the Network Advertising Initiative, which offers a single opt-out cookie, Zaneis said."
There is not one single cookie. The Opt-Out actually makes calls to servers for each company listed. http://www.networkadvertising.org/managing/opt_out.asp
Each web site then creates or edits a cookie from its domain that tells it the user has opted-out. You can see this in action if you use the Live HTTP Headers Firefox extension http://livehttpheaders.mozdev.org/
An opt-in would be economically disastrous to ad networks and free Internet services relied upon by most people; however, the current opt-out system does need to be changed. Between the two lies a compromise. I think that solution lies with a browser-based standard that let's a visitor opt-out from the browser. An ad network would identify itself in the HTTP headers as a company that uses behavioral advertising. The browser from which a user opted out would respond, also in HTTP headers, the user's choice. This is similar to how P3P operates but would be much more simple.
Post new comment