More on Internet Privacy Legislation 135
Last week we noted that Senator Hollings had introduced a privacy bill and that there were likely to be more introduced. Now Salon has a piece critical of Hollings' bill. EPIC wrote about it as well, and they seem to think it's not too bad, all things considered. Read Hollings' bill yourself and decide who's right. Also of note is a bill introduced in the House that would require all Federal agencies to prepare privacy impact statements (the ACLU has a summary) akin to the environmental impact statements now required for actions adversely affecting the environment. Seems like a good idea to me.
No right to privacy (Score:0, Insightful)
sensitive/non-sensitive (Score:5, Insightful)
(c) NONSENSITIVE PERSONALLY IDENTIFIABLE INFORMATION REQUIRES ROBUST NOTICE AND OPT-OUT CONSENT- An internet service provider, online service provider, or operator of a commercial website may not--
(1) collect personally identifiable information not described in subsection (b) online, or
(2) disclose or otherwise use such information collected online, from a user of that service or website.
---end quote
Salon's article does sem a bit overly critical. This bill is a necessary piece of legislation. Sure some would like to see it even stricter(prohibiting any spyware style market research), but as it is it prohibits companies from collecting sensitive information and also from collecting information which is non-sensitve but could potentially be used to identify you.
The Salon article implies that the bill will allow companies to collect all sorts of non-sensitive personal information and use it to build a complete profile of you, including the stuff that can't be directly collected due to it's sensitivity. This just isn't true.
TrustE -- Not! (Score:3, Insightful)
Oh, yes, of course, if they are members of wonderful TrustE then they'll nevvver evvver violate our privacy. That's why TrustE busted Yahoo! for changing our marketing preferences, right?
Seriously, has TrustE ever busted anybody -- at least any company that we've ever heard of?
This disturbs me more each day (Score:4, Insightful)
Don't be fooled, your name and address are two of the most sensitive peices of information you posses! In the hands of malicious people, it can simply be taken down to the DMV to bring up your file, and the unfortunate state of things is that most people list their social security number as their drivers ID (I changed mine to an anonymous number after taking a class in privacy, when we learned about the growing number of cases of identity theft). The fact of the matter is, I don't want people to have access to this sort of thing unless I give them it expressly. I also don't want information on my shopping and surfing habits getting released as it leads to phone soclicitations, as well as spam. What happened to the rights of the consumer? Why does congress allow bribes to give corperations the upper hand?
The world is changing rapidly, and our time is increasingly sucked away by meaningless adds. My parents can still remember a time not so long ago when junk mail was practically unheard of. Now we are saturated with it.
I think we ought to push for a bill which affords us a form of personal protection akin to the laws against tresspassing. In my opinion all cookies, spyware, etc that are installed on a computer without express permission from the user (EULA's are no good as no one reads them, and besides, we would be outraged if everyday were provided with a huge list of random comments, buried within which was a grant to tresspass on our property if we exit our house), should subject their makers to a fine. As a computer professional, my machines are a place I spend a considerable ammount of time, and I have a right to not have others intrude on my privacy.
As a final point, I realize that you can disable cookies, and most spyware, but it is ridiculous to assume that this makes them all right. Many people do not know how to do so, and above all else, we should never have to arm our computers with defenses just to preserve our rights. That is analogous to requiring everyone to bring a body guard when they left the house, or it would be legal to mug them.
*steps off of soapbox*, Sorry my wife is an IP lawyer and deals with this stuff everyday. We need more computing professionals in the government and law.
These same people accusing us of (Score:3, Insightful)
I think not. Let me take the time to personally assure any politicians who happen to read Slashdot that a their support for this kind of initiative wil gurantee them my lost support, regardless of party, in their next bid for re-election.
Re:No right to privacy (Score:2, Insightful)
Amendment IX: The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.
Amendment X: The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.
Re:sensitive/non-sensitive (Score:2, Insightful)
Perhaps we should implement a system whereby any company requiring us to opt-out is also required to pay us for the time spent opting out. Even assuming a low baseline salary for computer professionals of $50,000 a year, thats $24/hour spent. If I spend 15 minutes reading the agreement, and writing the e-mail, that's still a good $6 that they owe me for the time they have stolen from my day.
You don't get it. (Score:2, Insightful)
It won't Sen. Hollings and his colleagues; they'll be off the hook, free to posture, grandstand, and milk the situation for new "here's what I did for privacy" bills "cracking down" on some privacy violations while legitimizing others. And certainly not you, who will be dragged down to the lowest common denominator of what's acceptable, whether it actually works, or serves as veiled protection and license for data-mining and police-state surveillance interests, as is likely to happen, if past performance of these kinds of mechanisms is any indication.
We're better off with no govt. protection here, and people should start taking far better care of their own privacy themselves. They're fucked if they don't, regardless.
I guess everyone is forgetting all the crappy environmental laws and reviews that killed good projects while entrenching bad ones. Collective amnesia? Or is everyone just willing to pretend because "it's good for Mother Earth". Or so is the claim.
No, this is just yet another example of Congress passing the buck and shifting the blame in a hypocritical and self-serving manner. Fuck the dumb shit. Vote against Hollings and his kind next election.
--rgb
What about "Sensitive" data? (Score:4, Insightful)
I think this is a huge problem, BUT - doesn't anyone else see the problem with how "sensitive" data is defined in this bill?
Sensitive data can only be collected or shared on an opt-in basis. Sounds good, but isn't medical information (one of the "sensitive" items) protected more highly by the HIPPA acts? Won't this act undo everything HIPPA did to help protect medical records? All it takes is one hidden or weasle worked opt-in box to release all your medical information. Or finantial information. Once out there, it can be sold. Then it's gone for good - opting out at that point won't do any good.
We need to raise a huge stink about how trivially this bill handles critical private information - medical, finantial and other records.
Re:sensitive/non-sensitive (Score:4, Insightful)
(IANAL) I agree with your feelings on the matter, but there is a distinction, at least insofar as will be perceived by our lawmakers.
(Miko goes into lecture mode, pretending to be the guy in "Paper Chase") A contract requires a specific offer and a pro-active acceptance. A contract also requires consideration on all sides, i.e. everyone involved must get something theoretically of value. (That's why you hear about all those contracts in which someone gets one dollar. That one stinking dollar is the "consideration" received by one of the parties.) The scenario you describe wouldn't be a contract, because you did nothing to initiate the magazine subscription. However, an ISP can currently sell your name and other information and you aren't a party to that contract. You may feel like you're paying something out (your privacy) but that isn't currently recognized as something of consideration.
Furthermore, you can already establish a contract in which the ISP cannot sell your name and number. The problem is that most people don't know/care to do that and the contracts never mention the issue. Even if you tried to do so, most ISPs would simply look at you funny and keep smacking their gum. Ergo, in most real-world situations, the ISP has the right to sell your name because nothing in the contract said they couldn't. However, contracts are not entirely governed by their content. No contract in the world covers every possibility (Clause 182,383,282: Alien Invasions). That's why we have something called the Uniform Commercial Code. The UCC, among other things, sets the defaults for how contracts are interpreted. For example, if you offer to sell someone your car at a specific price (you have to set a specific price) but you don't tell them how long the offer is good, then they have a "reasonable" amount of time to accept. If you're wondering what's "reasonable", so have a lot of judges. One day is definitely reasonable. One year isn't. Now, back to the Hollings bill. What the Hollings bill does (theoretically) is establish some of those clauses that aren't explicitly covered in your contract with the ISP. The bill says, in effect, that unless the contract says otherwise, the ISP can sell your information, but if you tell them not to, they can't. Also, the ISP has to make it clear to you that if they intend to sell your info.
Who says the law ain't fun? Why, this stuff is almost as good as OOP.
More Bureaucracy? (Score:2, Insightful)
Georgia senator.
The only possible use I could see for these 'privacy impact reports' is in the press, where such documents would provide easily quotable material. But is that really enough reason to add to the crippling bureaucracy already in place?
Re:Credit where credit is due (Score:1, Insightful)
The past?? I hope you realize that the CBDTPA is not a dead issue - it's very much in the present, and will likely be in the future. Unless you have some secret memo from him showing that he's changed his mind?