Online Behavioral Advertising: Technical Steps Needed to Ensure Consumer Control
Read the full testimony (pdf)
These comments are submitted jointly by a law professor and computer science professor to address key technical issues in online behavioral profiling.
The Federal Trade Commission has asked for comments on its Proposed Self-Regulatory Principles for Online Behavioral Advertising. The first principle is “transparency and consumer control.” The essence of “consumer control,” under the proposed principle, is that consumers “can choose whether or not to have their information collected for such purpose.”
These comments examine what technical steps are needed to implement the Consumer Control Principle. The comments do not take any position on whether this principle of consumer control should become part of a self-regulatory or regulatory system.
Our principle findings are the following:
1. Cookies, as flawed as they are, are the primary existing mechanism for a website to determine that the same computer (or similar device) is returning to the website. We thus propose mechanisms for making cookies much more effective at upholding consumer choice with respect to behavioral targeting. Although “opt-in” cookies are technically feasible, we assume that the current policy discussion concerns “opt-out cookies,” which support consumers who choose not to participate in behavioral profiling.
2. Opt-out cookies today are often deleted by anti-spyware software. We recommend that anti-spyware software should be modified to honor opt-out cookies. It is technically feasible to create standards for opt-out cookies, and we believe security risks can be effectively addressed through creation of a public “white list” of opt-out cookies that will not be used for tracking.
3. Similarly, opt-out cookies are often deleted today when consumers use their browser software to delete all cookies. We recommend that browser software be updated to manage opt-out cookies better. As with anti-spyware software, the standards and security issues appear manageable.
In short, modest steps for anti-spyware and browser software can make opt-out cookies a much more effective tool for consumer choice about behavioral profiling. Unless these or similar technical measures are taken, the proposed FTC Consumer Control Principle will fail. Consumers will lack a feasible way to exercise their choice.
Read the full testimony (pdf)
Peter P. Swire is a Senior Fellow at American Progress and the C. William O’Neill Professor at the Moritz College of Law of the Ohio State University. Annie I. Antón is Associate Professor of Software Engineering at North Carolina State University.
To speak with our experts on this topic, please contact:
Print: Katie Peters (economy, education, poverty, Half in Ten Education Fund)
202.741.6285 or firstname.lastname@example.org
Print: Anne Shoup (foreign policy and national security, energy, LGBT issues, health care, gun-violence prevention)
202.481.7146 or email@example.com
Print: Crystal Patterson (immigration)
202.478.6350 or firstname.lastname@example.org
Print: Madeline Meth (women's issues, Legal Progress, higher education)
202.741.6277 or email@example.com
Spanish-language and ethnic media: Tanya Arditi
202.741.6258 or firstname.lastname@example.org
TV: Lindsay Hamilton
202.483.2675 or email@example.com
Radio: Chelsea Kiene
202.478.5328 or firstname.lastname@example.org