The FTC’s been busy today. In addition to clearing Google’s acquisition of DoubleClick, they’ve proposed a set of principals to guide self-regulation in behavioral advertising. Broadly, their proposals are:
- Every website where data is collected for behavioral advertising should provide a clear, consumer-friendly, and prominent statement that data is being collected to provide ads targeted to the consumer and give consumers the ability to choose whether or not to have their information collected for such purpose.
- Any company that collects or stores consumer data for behavioral advertising should provide reasonable security for that data and should retain data only as long as is necessary to fulfill a legitimate business or law enforcement need.
- Companies should obtain affirmative express consent from affected consumers before using data in a manner materially different from promises the company made when it collected the data.
- Companies should only collect sensitive data for behavioral advertising if they obtain affirmative express consent from the consumer to receive such advertising.
- The FTC seeks comment on what constitutes “sensitive data” (proposed already has been health information and information from minors) and whether the use of sensitive data should be prohibited, rather than subject to consumer choice.
Comments on the proposals are due February 22, 2008.
Update: The NAI comments on the proposal.