FTC recommends legislation to protect consumer privacy

|tab|

Self-regulation alone has not adequately protected consumer online privacy, therefore, legislation is needed to supplement self-regulatory efforts and guarantee basic consumer protections, according to "Privacy Online: Fair Information Practices in the Electronic Marketplace," a Federal Trade Commission report to Congress issued May 22. |ret||ret||tab|

The report is the third in a series of FTC reports on the effectiveness of self-regulation in protecting consumer privacy on the Internet. In it, the commission says while self-regulatory efforts have achieved some progress, the lack of broad-based implementation of online consumer protections requires legislative action. |ret||ret||tab|

"While the commission applauds the efforts by the private sector to address the issue of online privacy, the survey results show that such efforts have not been enough," said FTC Chairman Robert Pitofsky, in a press release. |ret||ret||tab|

"As this year's survey makes clear, the number of Web sites meeting basic standards of privacy protection is far too low, endangering consumer confidence in this fast-growing, pro-consumer marketplace," Pitofsky added. |ret||ret||tab|

The report recommends that Congress enact legislation establishing "basic standards of practice for the collection of information online" to ensure a minimum level of privacy protection for consumers. |ret||ret||tab|

Such legislation would require consumer-oriented commercial Web sites "that collect personal identifying information from or about consumers online" to "comply with the four widely-accepted fair information practices: notice, choice, access and security." |ret||ret||tab|

The recommendations to Congress are supported by the findings of the FTC's 2000 Survey of the most-visited sites on the Internet.|ret||ret||tab|

The survey was based on two target groups: a random sample of all Web sites with at least 39,000 unique monthly visitors; and the 100 most popular U.S. commercial Web sites. The results showed that only 20 percent of the random sample sites had implemented all four fair information practices, and only 42 percent of the most popular sites had done so. |ret||ret||tab|

Looking at the percentage of sites implementing the two critical practices of notice and choice, only 41 percent of the random sample and 60 percent of the most popular sites provided such privacy disclosures. |ret||ret||tab|

The report praises industry efforts to date, but points to survey results showing that the adoption of the industry's self-regulatory enforcement initiatives online privacy seal programs have not yet established a significant presence on the Web. According to the report, "the survey found that less than one-tenth, or approximately 8 percent, of sites in the Random Sample, and 45 percent of sites in the most popular group, display a privacy seal." |ret||ret||tab|

The report concludes that self-regulation alone "cannot ensure that the online marketplace as a whole will emulate the standards adopted by industry leaders." Also, it states that industry initiatives should continue to play an important role within any statutory structure, and "widely-adopted seal programs could be an important component of that effort." |ret||ret||tab|

The commission concluded that proposed legislation, in conjunction with self-regulation, will allow electronic commerce to reach its full potential and allow consumers to gain "the confidence they need in order to participate fully in the electronic marketplace." |ret||ret||tab|

The commission vote to release the report was 3-2, with Commissioner Orson Swindle dissenting, and Commissioner Thomas B. Leary concurring in part and dissenting in part. |ret||ret||tab|

Swindle called the majority's recommendation "an unwarranted reversal of its earlier acceptance of a self-regulatory approach" despite what he described as "continued, significant progress" in self-regulation. |ret||ret||tab|

In a 27-page dissent, he warned that "the privacy report stands as the majority's justification' for (its) recommendation to legislate privacy a dramatic reversal in position for the commission and a mandate for the commercial online world to comply with the government's interpretation of all four fair information practice principles. Yet the report is extremely flawed in its presentation of fact, its analytical logic and its conclusions. This is no way to create good law." |ret||ret||tab|

He urged that "legislation should be reserved for problems that the market cannot fix on its own and should not be adopted without consideration of the problems legislation may create by, for example, imposing costs or other unintended consequences that could severely stifle the thriving New Economy." |ret||ret||tab|

"Most disturbing," Swindle continued, "the Privacy Report is devoid of any consideration of the costs of legislation in comparison to the asserted benefits of enhancing consumer confidence and allowing electronic commerce to reach its full potential. |ret||ret||tab|

"Instead, it relies on skewed descriptions of the results of the commission's 2000 survey and studies showing consumer concern about privacy as the basis for a remarkably broad legislative recommendation. It does not consider whether legislation will address consumer confidence problems and why legislation is preferable to alternative approaches that rely on market forces, industry efforts, and enforcement of existing laws." |ret||ret||tab|

Swindle concluded that "the current recommendation ... defies not just logic but also fundamental principles of governance. In recognition of some of the complexities of regulating privacy particularly access and security the commission asks Congress to require all commercial consumer-oriented Web sites to comply with extensive, yet vaguely phrased, privacy requirements and to give the commission (or some other agency) a blank check to resolve the difficult policy issues later. This would constitute a troubling devolution of power from our elected officials to unelected bureaucrats." |ret||ret||tab|

Leary concurred with the majority that "some legislation is appropriate," but he believed "that the recommendation in the report endorsed by a majority is too broad in one respect and too narrow in another. The recommendation is too broad because it suggests the need for across-the-board substantive standards when, in most cases, clear and conspicuous notice alone should be sufficient. The recommendation is too narrow because any legislation should apply to offline commerce as well." |ret||ret||tab|

He added that "vendors and their customers would both benefit from a legislative initiative to require disclosures of greater clarity and comparability." |ret||ret||tab|

However, "the report does not explain why an adequately informed body of consumers cannot discipline the marketplace to provide an appropriate mix of substantive privacy provisions." |ret||ret||tab|

Moreover, Leary said, a "focus only on online privacy issues could ultimately have a detrimental impact on the growth of online commerce" because "online companies will be placed at a competitive disadvantage relative to their offline counterparts." |ret||ret||tab|

Pitofsky and Commissioners Sheila F. Anthony and Mozelle W. Thompson issued separate public comments which are not part of the report.|ret||ret||tab|

Copies of the report are available at the FTC's Web site, www.ftc.gov, or by calling 877-FTC-HELP.[[In-content Ad]]