Privacy Platform Meeting (chaired by Sophie in 't Veld) on online behavioral advertising 23-6-2010

part 2 Reaction Mr. Buttarelli (EDPS) on the Opinion of the Article 29 Working Group

Dutch Liberal MEP Sophie in 't Veld: Transparency, Choice and Consent key words for cookies




At today's Privacy Platform Meeting in the European Parliament, Belgian Data Protection Supervisor Mr Willem Debeuckelaere presented the opinion about online behavioral advertising, adopted just before by the Working Party of European Data Protection Authorities.




The opinion focuses on "TIC": Transparency, Information, Consent". The Article 29 Working Party expressed its concern about the implications for privacy and data protection of the widespread practice of behavioural targeting. Mr. Debeuckelaere says that what is at stake is that many consumers are not aware that their surfing behavior is being monitored and data are being stored for advertising purposes. The opinion points out the need to adhere to the EU data protection regulatory framework.


The Privacy Platform, chaired by Mrs in 't Veld, is a regular, informal event, bringing together different stakeholders on privacy related topics. Today, over 100 representatives from industry, privacy activists, EU institutions, governments, and European data protection supervisors discussed the privacy aspects of behavioral advertising. Behavioral advertising is the tracking of consumers on the internet, mainly with the use of cookies. The data are used for advertising targeted to the individual consumer's specific interests, based on his profile.




The debate was particularly topical, as the European Commission is currently preparing a radical overhaul of the EU data protection framework.




The industry is trying to respond to privacy concerns of users, and it is in the process of developing various tools for transparency and user control. Looking at the revision of the data protection framework, the panelists representing industry warned against excessively detailed legislation, that might stifle innovation and development. Some speakers considered existing regulation is principle based, and applies even to the newest technologies. In their view, no new legislation is needed, just better enforcement and compliance.




Representatives of Privacy International and the Electronic Frontier Foundation on the other hand, were more critical, and pointed out that the user control tools don't go nearly far enough, because they do not allow for the complete erasure of profiles, and some data collection, for example by flash cookies, remains invisible and outside the control of the user. Moreover, they argued that the necessity of advertising for funding the internet is overstated, so that the storage of data and the use of profiles is not fully justified.




In 't Veld underlines that users will vote with their feet, using their consumer power to make privacy a competition factor. "But in order to ensure that companies have an incentive to keep improving their privacy standards, we must ensure fair and unfettered competition in online advertising and search engines", In 't Veld says. As rapporteur for competition issues in the Economic Affairs committee, she urges the European Commission to conduct a sector inquiry into online advertising.




On the issue of consent, opinions varied. Both data protection supervisors and privacy activists preferred an "opt in" system, where users actively chose for their data to be used for behavioural targeting. Industry on the other hand preferres the "opt out" system, where users indicate they opt out of (parts of) the profiling system.




In addition to the "C" of Consent and user Control, the "T" of transparency was a key word for all. During the meeting, Mrs In 't Veld suggested adding one more C to the key message; "choice", because Internet users must have a real choice. "Often internet users are more or less obliged to give their consent, as there is no alternative. Users must have a real choice, otherwise it is just token consent", In 't Veld said.




She also stressed the importance of a single set of data protection rules, applying equally to the private and the public sectors. "We must regulate the use of personal data for commercial pruposes, but the same standards of data protection should apply to the use of those same data by public authorities for law enforcement purposes. We often do not realise how government agencies are using data collected by companies for commercial purposes. But different rules apply to the private and public sectors. That must be corrected", In 't Veld says.

Category:

News & Politics

Tags:

• PP