Some e-commerce companies may soon have to change their online privacy policies and practices as a result of a recent agreement between large network advertisers and the Clinton administration regarding online data collection.
In a landmark pact announced late last month, DoubleClick and eight other network advertisers, which collectively own more than 90% of the market, agreed to follow a set of self-regulatory guidelines for the collection of online data. The guidelines will ultimately affect e-commerce sites through new contract terms they will get from the network advertisers.
Federal officials said the advertisers will raise the bar on online privacy for e-commerce sites. The advertisers said they hope the guidelines will slow efforts in Congress to pass privacy legislation. Other observers said they aren't sure what the effect will be.
"I'm not convinced that this will change anything in the near term," said Jordan Rosner, director of new media marketing at Pfizer Pharmaceuticals Group in New York. The guidelines will improve the practices of some big companies, he said, but there are still going to be firms "willing to take the risk of public backlash" over their privacy practices.
The U.S. Federal Trade Commission (FTC) applauded the self-regulation agreement developed by the nine network advertisers, known collectively as the Network Advertising Initiative. But the FTC said privacy legislation will still be needed to ensure that advertisers that aren't part of the group comply.
But the agreement also opens the door to the most controversial aspect of online profiling: the merging of personal information, including names and addresses, with Web browsing habits - and sharing that information with third parties. Under the agreement, e-commerce sites that take this route will have to offer "robust" and explicit notification and give end users the ability to remain anonymous.
This provision has alarmed privacy advocates who say they fear that end users, who don't understand the implications of advertiser data-sharing agreements, would trust one advertiser with personal data, then find it spread among many others.
"Clearly, if you read any advertising statement, they're not exactly neutral," said Andrew Shen, a policy analyst at the Electronic Privacy Information Center in Washington.
DoubleClick says it has no plans to begin merging personally identifiable data.
In March, the New York-based company backed off plans to combine such data with information on Web surfing habits after facing wide-ranging criticism.