If it collects personally identifiable information about customers, such as their names, addresses or telephone numbers, the company's website must clearly and unambiguously notify them of this fact before the company collects this information. Rule 2 (Choice): Depending on the type of information a company collects, there must be opt-in and opt-out options. Opt-in, or obtaining the customer's permission, is required to link personally identifiable information that a company has about a customer such as name, address or telephone number with data acquired about Web surfing habits. Opt-out means that the customers have to be given the chance to say no, but they don't have to explicitly agree. Opt-out is required when merging non-personal data about customers.

Rule 3 (Access): Customers must have reasonable access to personally identifiable information that a company keeps about them for profiling.

Rule 4 (Security): A company must make reasonable efforts to protect the data it collects for profiling purposes from loss, misuse, alteration and improper access.

Compliance with Self-Regulation

According to the Federal Trade Commission (FTC), NAI's membership constitutes over ninety percent of the network advertising industry in terms of revenue and ads served. Therefore, the FTC has concluded that legislation is required to bring the remaining ten percent of the industry in compliance with NAI rules of online profiling conduct. Further, the FTC states that:

Self-regulation cannot address recalcitrant and bad actors, new entrants to the market, and drop-outs from the self-regulatory program. In addition, there are unavoidable gaps in the network advertising companies' ability to require host Web sites to post notices about profiling, namely Web sites that do not directly contract with the network advertisers; only legislation can guarantee that notice and choice are always provided in the place and at the time consumers need them." (Online profiling: a report to Congress, 2000).

Still, others argue that self-regulation is largely ignored not just by a few bad actors, but that the majority of companies fail to fully comply with NAI standards (Berman, 2000). There has definitely been an increase in the number of companies including a privacy policy on their Web site, rising from two percent in 1998 to sixty-two percent in 2000 after the NAI's guidelines were released. and, in 1998, only fourteen percent of surveyed sites made any statement about their use of personal information. This number grew to seventy-nine percent in 2000. but, the number of companies meeting all NAI standards was only twenty percent in 2000. Critics charge that all the NAI has accomplished is making businesses appear that they are doing something about privacy issues to appease an increasingly outraged public and to stave off meaningful legislation.

Fair Information Practices developed by the NAI do not provide users with the level of privacy protection that they would like to have for a variety of reasons. With regards to notice, Web sites privacy policies are hard to find and do not clearly state what personal information is collected and how it will be used and cookie transactions are not transparent to the user (Rotenberg, 1998). Under these circumstances it's difficult to argue that consumers really have the choice of opting-out when online profilers merge non-personal data about customers. Most Websites and Internet advertising networks do not make it possible for individuals to access their own data (Rotenberg, 1998). Companies do appear to be making reasonable efforts to protect the data they are collecting, but they are doing so to comply with other laws rather than the Fair Information Practices.

Consumers deserve better protection of their online privacy. Seventy percent of them believe that their should be new laws to protect their privacy (Statistics). The solution for the above problems is to make opting-in mandatory for all online profiling, not just the current recommendation for opt-in requirements only for linking personally identifiable information with Web surfing behavior. Further, this cannot be a voluntary activity as the degree of non-compliance with existing guidelines clearly indicates.

Despite common views that opt-in requirements will lead to the...

A 2005 survey revealed that eighty-one percent of the respondents said they were interested in receiving personalized content (Kerner, 2005). Of these, sixty percent indicated that they would be willing to spend a minimum of two minutes answering questions to obtain the personalize content. and, twenty-six percent reported that they would be willing to spend at least six minutes answering questions. Only twelve percent said that would not be willing to answer personalization questions.
Although people are willing to answer questions to receive personalize content, they still want to protect their privacy. Fifty-nine percent of the people stated that they are not willing to share personal preferences and forty-six percent would not be willing to share demographic information (Kerner, 2005). Only thirty-two percent of the responding would knowingly consent to allowing Web sites to track clicks and purchases in exchange for personalized content. Consumers are very concerned about the security of their personal information and do not want to voluntarily or involuntarily disclose it.

The bottom line is that most consumers want personalization, but they do not want to give up their privacy to get it. and, there's no need for businesses to violate privacy rights as they are currently doing by insisting on invasive online profiling practices. Opt-in strategies can simultaneously satisfy the needs of targeted marketing and consumer privacy.

Bibliography

Arnis, D. (2000, Feburary 1). Online profiling: A threat or a benefit?. http://www.netfreedom.org/news.asp?item=106

Berman, J. (2000, May 25). Privacy online: Fair information practices in the electronic marketplace. http://www.cdt.org/testimony/000525berman.shtml

Clickstream concerns. http://cse.stanford.edu/class/cs201/projects-00-01/cookies/index.html

Computer law tip of the week (2000, August 14). http://www.mgrossmanlaw.com/articles/2000/online_profiling.htm

Kerner, S.M. (2005, August 16). Consumers want personalization -- and privacy. http://www.clickz.com/showPage.html?page=3527716

Mulligan, D. (1999, November 30). Public workshop on online profiling; Testimony of the Center for Democracy and Technology before the Federal Trade Commission. http://www.cdt.org/testimony/ftc/991130mulligan.shtml

Online profiling: A report to Congress (2000, July). Federal Trade Commission. http://www.ftc.gov/os/2000/07/onlineprofiling.htm

Online profiling: Benefits and concerns (2000, June 13). http://www.ftc.gov/os/2000/06/onlineprofile.htm

Privacy & online politics: Is online profiling doing more harm than good for citizens in our political system?. The Center for Democracy and Technology. http://72.14.253.104/search?q=cache:9doc2fpoA-kJ:www.courtaccess.org/states/otherresources/articles/article_onlineprofiling2002.pdf+%22online+profiling%22+personalization&hl=en&ct=clnk&cd=9&gl=us

Report: Consumers vulnerable to profiling, price discrimination (2005. June 2). Electronic Privacy Information Center. http://legalminds.lp.findlaw.com/list/epic-news/msg00185.html

Rotenberg, M. (1998, March 26).Testimony and statement of record of Marc Rotenberg on communications privacy before the Subcommittee on courts and Intellectual Property. http://www.epic.org/privacy/internet/rotenberg-testimony-398.html

Sax, M.M. (1999, August 6). Data collection and privacy protection: an international perspective. http://library.findlaw.com/1999/Aug/1/127836.pdf

Statistics. http://cse.stanford.edu/class/cs201/projects-00-01/cookies/index.html

Suchet, P. (2004, May 27). Real-time online profiling. http://www.clickz.com/showPage.html?page=3359121

Taylor, H. (2003). Most people are "privacy pragmatists" who, while concerned about privacy, will sometimes trade it off for other benefits. http://www.harrisinteractive.com/harris_poll/index.asp?PID=365

Thibodeau, P.T. (2000, September 18)., Online profiling. Computerworld. http://www.computerworld.com/industrytopics/retail/story/0,10801,50332,00.html

Why business cannot afford to disregard consumer privacy concerns. http://www.law.com/pdf/sfb/PrivacyCh02.pdf