Feeds

AT&T privacy policy overreaches, lawyers say

What's yours is mine

Beginner's guide to SSL certificates

A recent change to AT&T's privacy policy for broadband and video users is overbroad and likely will leave the courts or Congress to decide whether the company's practices are standard or sinister, legal experts said.

The policy change, which comes as the telecommunications giant is defending itself in court against multiple lawsuit stemming from its alleged cooperation with a surveillance program conducted by the National Security Agency, states that "while your account information may be personal to you, these records constitute business records that are owned by AT&T".

The language, if accepted by consumers and supported by the courts, could redraw the current lines in the battle between privacy advocates and companies that retain significant data on their customers, said Charles Kennedy, an attorney specialising in privacy law and Of Counsel at Morrison & Foerster.

"The playing field has just tilted about 45 degrees with AT&T saying they can do this," Kennedy said. "This means that they could get the whole enchilada if they win. It's a pretty powerful change."

The claim to own, without reservation, its customers private data comes as AT&T and other telecommunications firms have come under fire for turning over customer data to the government outsides of the confines of established legal practices.

While evidence regarding the domestic surveillance activities of the NSA have mounted, the Bush Administration has stepped in and cited "state secret privilege" to quash the increasing number of court actions.

Some legal experts have labeled AT&T's privacy policy change as an attempt to strengthen its legal defense in court, but the company denied the allegations.

"We did this for two reasons," said Walter Sharp, a spokesman for the company. "One is that we merged two companies (SBC and AT&T) and we needed to merge two privacy policies. The second is that we are about to launch a video service, so we needed a policy to cover that."

The changes to the privacy policy, first brought to light by the San Francisco Chronicle, were in the works since before the original New York Times story broke the story of the NSA's activities in December, Sharp maintained.

The revised language, appearing under the heading "Legal Obligations/Fraud" and only accessible to AT&T customers, states:

While your account information may be personal to you, these records constitute business records that are owned by AT&T. As such, AT&T may disclose such records to protect its legitimate business interests, safeguard others, or respond to legal process. Specifically, AT&T provides account information to collection agencies and/or credit bureaus. We may disclose your information in response to subpoenas, court orders, or other legal process, or to establish or exercise our legal rights or defend against legal claims. We may also use your information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of Service Terms or the Acceptable Use Policy, or as otherwise required or permitted by law.

While the first half of the revised section discusses only "account information" - defined in the privacy policy as contact, billing and equipment information but not usage data - the latter part of the new language uses the more general term, with no hint of irony, of "your information."

Intelligent flash storage arrays

More from The Register

next story
Crouching tiger, FAST ASLEEP dragon: Smugglers can't shift iPhone 6s
China's grey market reports 'sluggish' sales of Apple mobe
Sea-Me-We 5 construction starts
New sub cable to go live 2016
EE coughs to BROKEN data usage metrics BLUNDER that short-changes customers
Carrier apologises for 'inflated' measurements cockup
Comcast: Help, help, FCC. Netflix and pals are EXTORTIONISTS
The others guys are being mean so therefore ... monopoly all good, yeah?
Surprise: if you work from home you need the Internet
Buffer-rage sends Aussies out to experience road rage
EE buys 58 Phones 4u stores for £2.5m after picking over carcass
Operator says it will safeguard 359 jobs, plans lick of paint
MOST iPhone strokers SPURN iOS 8: iOS 7 'un-updatening' in 5...4...
Guess they don't like our battery-draining update?
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.