Federal Privacy Law

As the temperatures rise in a typical Washington summer, so grows the pressure on some online advertising firms. 

Yesterday the House Energy and Commerce Committee’s Telecommunications and the Internet Subcommittee held a hearing on the questionable methods for advertising currently being used by some Internet service providers (ISPs).  The hearing was entitled, “What Your Broadband Provider Knows About Your Web Use: Deep Packet Inspection and Communications Laws and Policies.”   Panelists included: Bob Dykes, the CEO for NebuAd, David Reed, an early Internet pioneer and professor at MIT, Alissa Cooper, the Chief Computer Scientist for the Center for Democracy and Technology, Scott Cleland, President of Precursor, LLC, and Bijan Sabet, a General Partner at Spark Capital. 

Released one day before the Senate Commerce Committee held its hearing on the privacy implications of online advertising, a new report says targeted ads may involve practices that violate state and federal wiretap laws.

On Tuesday, the Center for Democracy and Technology (CDT) issued a memo, saying Internet service providers (ISPs) that allow an advertising network to copy [their] customers' Web traffic contents are defying "reasonable consumer expectations and may [be violating] communications privacy laws."

Currently, some ISPs are working with third party advertising agencies, which are copying consumer data in order to target specific ads at users. One such firm, NebuAD, testifed before the Senate Commerce Committee yesterday. NebuAd claims it does not violate any laws because they do not collect personally identifiable information. Some, though, argue that any collection of data can ultimately be tied to an individual and disagree with NebuAd's assertion that privacy is completely protected. CDT's memo says the practice most likely violates legal protections provided in the Electronic Communications Privacy Act.

EDUCAUSE joined the American Council on Education (ACE) in comments to respond to a Notice of Proposed Rulemaking regarding the Family Educational Rights and Privacy Act (FERPA). The EDUCAUSE contribution addressed the proposed rules treatment of Social Security Numbers (SSN's), Student ID Numbers, and Student User ID's in the context of "directory information." The comments state: