EU-Regustand trend spotting - beavioral targeting - the mother of all privacy battles
- George Orwell has arrived. Some users’ every click and keystroke that comes down the line is being monitored in order to provide them with profiled advertising.
This is a follow-up on our story entitled: The Russian Mafia is Raising its Ugly Head - this Time in Sheep’s Clothing - be Careful
We have pointed out that Internet Service Providers (ISPs) have begun to work with companies that can harvest the stream of data for clues to a person’s interests. In turn, ISPs are making money from advertisers who use the information to target their online pitches.
The practice represents a significant expansion in the ability to track a household’s Web use because it taps into Internet connections.
Meanwhile the Federal Trade Commission has proposed guidelines for behavioral targeting of online advertising. Comments are due April 11.
But some experts have stated that these guidelines regarding behavioral advertising have been outpaced by the technology. Worst is that they do not address the practice of deep-packet inspection on the Internet directly. Therefore, the regulation might be futile and of little use unless it is improved beforehand. We discuss this in more detail here:
- Phorm offers today’s oximoron - eavesdroppers protect your privacy
Nevertheless, deep-packet inspection is similar to having your phone company tap your phone calls. While you do not want this, you neither want your ISP tapping your web traffic.
Citizens or consumers are concerned what will happen with this information, which third parties will get access and how.
For online publishers and media houses the technology offers the opportunity to offer me advertising that is not based on the content of the page I am visiting but, instead, knowing that it is me who is looking at it. Big brother watching you for sure.
The revelation, first detailed on our sister blog InfoSec, might lead to legal action by any of the UK users who can show their data were used. WHY you ask? Well legal minds claim that the technology seems to breach the following regulation in the UK:
Regulation of Investigatory Powers Act (RIPA) 2000 Chapter 23
The above regulation makes it a criminal act to intercept communication traffic on a public network without prior consent or a warrant. Hence, we are hopeful that a case will be brought against the ISPs involved in the UK to make sure that we will not soon be faced to accept ISP contracts that stipulate opting-in clauses as conditions of service
- If this was helpful - subscribe to feeds from CyTRAP Labs.