Feeds

Web privacy bandits named and shamed

Spam merchants and credit card data dogs

  • alert
  • submit to reddit

Remote control for virtualized desktops

Internet sites are failing to either protect consumers privacy or adhere to international data protection laws.

A study of 751 sites by Consumers International, the global federation of 13 consumer organisations, reveals that many European and American Internet sites aimed at consumers fall woefully short of international standards on data protection.

The vast majority of sites gave users no choice about inclusion on mailing lists or having their name passed on to affiliates or third parties. More than two thirds of sites collect some sort of personal information from users, which would make it easy to identify and contact that person.

Worse still, only ten per cent of sites targeting children asked kids to get their parents' consent before giving personal information.

Despite tight European Union regulation, sites in Europe were found to be no better at being up-front about how users' data would be used than those in the US.

Many companies were found to flout EU legislation requiring them to give customers the option of insisting that their personal information is not divulged.

As part of the study, a team of researchers set up a set of online identities which were used to test the practice of some sites against their stated privacy policies. This part of the research only tested 17 US sites and 16 sites in Europe but it still threw up some interesting anecdotal evidence.

Three sites disregarded requests to be left off mailing lists. These were French book site lalibrairie.com, healthshop.com and UK wine retailer Berry Bros & Rudd, bbr.com. Among the sites that didn't give people any choice about receiving email were babyworld.co.uk, and US bookseller, harvard.com.

Another issue thrown up was over the security of credit card information sent online. In one case, US CD retailer cdworld.com sent out two emails requesting credit card confirmation be faxed to the company. This was not done but the order was processed anyway. UU T-shirt retailer 3tee.com sent an unencrypted email containing credit card information.

Consumers International is calling for government and regulators to take urgent action to adopt laws, rules and procedures to tighten up on privacy and establish a body that consumers can turn to for redress.

The organisation has provided a helpful five-point plan for people to protect themselves from misuse of private information in ecommerce. This includes: limiting disclosure of your personal information, using a separate email account for ecommerce activities, rejecting cookies planted on PCs by intrusive businesses, using privacy tools which allow users to surf anonymously and learning and applying your legal rights. ®

External links

Consumer International's report

Related stories

FTC clears DoubleClick of privacy invasion
Travelocity drops customers' pants in public
Europe warms to spam ban

Beginner's guide to SSL certificates

More from The Register

next story
MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for TERRORISM'
PM urged to 'prioritise issue' after Facebook hindsight find
Assange™ slumps back on Ecuador's sofa after detention appeal binned
Swedish court rules there's 'great risk' WikiLeaker will dodge prosecution
NSA mass spying reform KILLED by US Senators
Democrats needed just TWO more votes to keep alive bill reining in some surveillance
'Internet Freedom Panel' to keep web overlord ICANN out of Russian hands – new proposal
Come back with our internet! cries Republican drawing up bill
What a Mesa: Apple vows to re-use titsup GT sapphire glass plant
Commits to American manufacturing ... of secret tech
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.