Washington, D.C. -- Pam Dixon will be testifying before the Senate Commerce Committee today at 2:30 pm Eastern. The hearing, held by Senator Rockefeller, focuses on data brokers, what information they are collecting from consumers, and what they are doing with the information. The hearing will take place after a ...
San Diego -- 15 November, 2013: The General Accounting Office (GAO) issued its long-awaited report on data brokers, INFORMATION RESELLERS: Consumer Privacy Framework Needs to Reflect Changes in Technology and the Marketplace. The report discusses key World Privacy Forum testimony and research. "We are pleased with the GAO report," said Pam Dixon, Executive Director of the World Privacy Forum. "In particular, we are glad the GAO highlighted our work calling for a stop to the selling of people's sensitive medical and health information for marketing purposes. This is a practice that is causing great harm, the GAO made the right call in pointing out new controls are needed." This press release includes links to the GAO report, to Dixon's Congressional testimony, and to the WPF report discussed by the GAO.
We are delighted with <a href="http://money.cnn.com/2013/10/30/pf/government-data-broker/index.html/?p=2129">CNN's coverage</a> of our new report on data brokers.
This report focuses on government use of commercial data brokers, the implications for that usage, and what needs to be done to address privacy problems. The government must bring itself fully to heel in the area of privacy. If it is going to outsource its data needs to commercial data brokers, it needs to attach the privacy standards it would have been held to if it had collected the data itself. Outsourcing is not an excuse for evading privacy obligations. Report authors: Bob Gellman and Pam Dixon.
The US federal government uses commercial data brokers [1] extensively for a wide variety of governmental activities. It is unquestioned that the government provides considerable revenue to commercial data brokers. How much? A reasonable and conservative estimate is that the number ranges in the billions of dollars. Over the course of the last 20 years, the extent of the relationship has become clear through a series of detailed investigations and scholarly research. For background purposes, we reference a leading study and discuss a newer use. This report does not seek to reinvestigate and re-document known uses.
Recommendations for the Office of Management and Budget: OMB should establish privacy standards that are at least a good as those in and recommended for the Do Not Pay Initiative to cover all government purchases of commercial databases with personal information. OMB should consider accomplishing an expansion by establishing a task force that includes representatives of consumer and privacy groups.
OMB deserves much praise for this novel privacy initiative, but it has more work to do. The evaluation of the first private sector database in the Do Not Pay Initiative needs to be accomplished in the open with full participation by all interested parties. The OMB memo provides for that. We need to see how well that process works.
The best starting point for understanding the OMB Do Not Pay memo is with the legal framework behind the Do Not Pay Initiative. The Initiative derives from a combination of little-noticed executive orders and updates to existing laws. In 2009, Executive Order 13520, Reducing Improper Payments, [29] directed agencies to identify "ways in which information sharing may improve eligibility verification and pre-payment scrutiny." This was the start of the current Do Not Pay Initiative.
You are reading the Executive Summary of Data Brokers and the Federal Government: A New Front in the Battle for Privacy Opens Report Links: Report Home & Executive Summary Download the full report (PDF) Jump to other sections of the report: Executive Summary | I. Introduction | II. Discussion | ...
You are reading Appendices A, B, and C of Data Brokers and the Federal Government: A New Front in the Battle for Privacy Opens Report Links: Report Home & Executive Summary Download the full report (PDF) Jump to other sections of the report: Executive Summary | I.Introduction | II. Discussion ...
April 18, 2013 Do you give your zip code to retailers when you buy something? Think twice before you blurt out "90210." WPF's Pam Dixon spoke to Melanie Hicken of CNN Money about data brokers and how our actions and habits define us, and potentially, can shape some of our ...
In 2012, the US Federal Trade Commission brought a remarkable case against Equifax for selling consumer financial information -- which included credit scores and late mortgage payment information-- to companies offering services to consumers in financial distress. The World Privacy Forum commented to the FTC on this case, which was important for a number of reasons.
Arizona School of Law -- Pam Dixon participated as a discussant and contributor to the Arizona School of Law's private workshop on the topic of the future of privacy. Key areas of discussion included the European Union's Right to be Forgotten proposal, consent and health privacy, and Do Not Track.
March 26, 2012 San Diego, California --- The World Privacy Forum strongly supports the idea of a centralized opt-out site for data brokers. "A centralized data broker opt out would ideally function like a Do Not Call list for consumers," said Pam Dixon. "The idea is that consumers can readily ...
Data Broker opt out -- WPF, in 2011 comments to the FTC, urged the FTC to create a centralized place for consumers to opt-out of data broker tracking. This is a long-standing issue WPF has worked on. Previously, WPF filed a petition in 2009 to the FTC regarding mail-in data broker opt outs, which resulted in an FTC action and improvements for consumers. In its new report published today, the FTC has picked up WPF's centralized opt out recommendation, specifically citing WPF's comments. From its report: "The Commission recommends that the data broker industry explore the idea of creating a centralized website where data brokers that compile and sell data for marketing could identify themselves to consumers and describe how they collect consumer data and disclose the types of companies to which they sell the information." The WPF strongly supports this idea and views assistance to consumers in this area as vital.
The FTC's new privacy report -- a long -awaited planbook for privacy in the digital age - has picked up several key recommendations the WPF has made. First, the report picks up WPF's direct recommendation in its 2011 comments that the FTC set up a centralized web site to allow consumers to opt out of data brokers. The FTC has directly called for this as a primary part of its report. The WPF strongly supports this. Pam Dixon of the WPF originated the Do Not Track idea in 2007, and with a group of privacy experts, submitted the original idea to the FTC that year. Now, DNT has also made it into the final FTC report.
Internet and consumer privacy -- The World Privacy Forum's executive director Pam Dixon will testify about online consumer privacy before the House Committee on Energy and Commerce today.
WPF executive director Pam Dixon testified at a joint subcommittee hearing focused on privacy and the collection and use of online and offline consumer information. Dixon's testimony focused on the new "modern permanent record" and how it is used and created. Dixon said "The merging of offline and online data is creating highly personalized, granular profiles of consumers that affect consumers’ opportunities in the marketplace and in their lives. Consumers are largely unaware of these profiles and their consequences, and they have insufficient legal rights to change things even if they did know." The testimony explored concrete examples of problematic consumer profiling activities.
Data Broker Settlement -- In April 2009, the World Privacy Forum sent the FTC a complaint regarding a lack of online opt-outs for consumers at some online data broker web sites. Our complaint focused on the difficulties online consumers would have opting out of certain web sites. In our complaint, we noted that online consumers were having difficulties with the opt outs. Today the FTC issued a final decision in this matter, and specifically improved online opt outs for consumers at US Search.
The World Privacy Forum filed comments with the FTC in response to its preliminary staff report, Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers. In our comments, we urge the FTC to take affirmative steps to protect consumer privacy online and offline. Our comments include a brief history of privacy self regulation, and point out how privacy self regulation has consistently failed. The comments also discuss Do Not Track, and urge the FTC to take a broader look at tracking protections for consumers. WPF also specifically requested that the FTC identify credit reporting bureaus subject to Fair Credit Reporting Act regulations and assist consumers in locating those bureaus.
Health privacy -- The World Privacy Forum filed comments today about how medical records and other health information is intersecting with online advertising and online activities. The WPF comments were filed with the Department of Health and Human Services in response to its request for comments on personal health records, privacy, and social media.
Opt-out and how-to -- The popular WPF Top Ten Opt Out List has been newly updated. We have added a new section to our list with step by step details on how to opt out of RapLeaf. We encourage consumers to view any of their profiles that exist at RapLeaf and to opt out of RapLeaf permanently. We have also updated the phone numbers and other information on the rest of our opt out list. To see more, visit our Opt Out List.
Data brokers -- WPF will be speaking at the CFP conference on two panels. On June 15, Pam Dixon will participate in a plenary session on data brokers. On June 16, Dixon will moderate a health care privacy panel. This panel will focus on electronic health care in the state of California and the current privacy issues in electronic health exchange.
Digital Signage Privacy Principles -- The nation's leading consumer and privacy groups released a set of baseline consumer privacy principles to be included in digital signage networks. The principles were released at the Digital Signage Expo in Las Vegas, Nevada, where World Privacy Forum executive director Pam Dixon spoke about the principles to a large group of digital signage industry professionals.
FTC Privacy Roundtable -- Thursday, January 28, WPF Executive Director Pam Dixon will be speaking at the FTC's Privacy Roundtable about the privacy implications of digital signage networks and will be specifically discussing the new report: The One-Way Mirror Society: Privacy Implications of the New Digital Signage Networks. Few consumers, legislators, regulators, or policy makers are aware of the capabilities of digital signs or of the extent of their use. The technology presents new problems and highlights old conflicts about privacy, public spaces, and the need for a meaningful debate.
