Connect with us

Technology

UK privacy watchdog takes credit for rise of ‘consent or pay’ rule

Published

on

A homemade chocolate cookie with a bite and crumbs on a white background

The UK’s data protection watchdog says its crackdown on sites that don’t ask visitors to consent to having their browsing activity tracked and profiled for ad targeting is bearing fruit. However, it admits that some of the changes prompted by the crackdown have seen sites adopt a controversial type of paywall that requires users to pay a fee to access content or opt in to being tracked and profiled for ad targeting (also often known as “pay or consent”).

The ICO didn’t disclose which websites had switched to a pay-or-agree model because it began asking questions on their tracking cookies. But it did name and shame several corporations for failing to comply with other cookie rules.

On Tuesday local time, the Information Commissioner’s Office (ICO) announced it had reprimanded Bonne Terre, the corporate behind Sky Betting and Gaming, for unlawfully processing personal data without consent.

Research has shown that data tracking can do loads of harm to individuals with addiction problems, which can explain why the general public rebuke of the ICO focused on an organization within the gambling sector.

“From 10 January to 3 March 2023, Sky Betting and Gaming processed users’ personal data and shared it with advertising technology companies as soon as they accessed the SkyBet website – before they had the opportunity to accept or reject advertising cookies,” the ICO wrote in a press release. “This meant that their personal data could be used to target them with personalised adverts without their prior consent or knowledge.”

The regulator told TechCrunch that it selected to issue a warning moderately than a sanction on this case since it believes it’s a proportionate use of its powers — “based on what will achieve the best outcome, and based on our priorities and limited resources.”

“In this case, we took into account Bonne Terre’s positive engagement with the ICO and the steps it has taken to improve compliance and considered that a reprimand was the most proportionate action,” ICO spokesman James Huyton added.

The reprimand is an element of a wider crackdown by the ICO on the use of cookies without consent, with the regulator highlighting a review of the UK’s “top 100 sites” last yr that identified “problems” with the way in which greater than half of sites used promoting cookies. then he wrote to 53 involved sites, warning they face enforcement motion in the event that they don’t change the way in which they deploy promoting cookies to comply with data protection law. The ICO suggests the outreach has helped remove some non-compliant cookie banners.

The regulator declined to verify the identity of any of the opposite sites contacted as part of its cookie compliance check. However, reporting the outcomes of its flurry of letters, the ICO said 52 of the sites it approached had made changes to the way in which they collected consent to tracking. The ICO said it had observed a number of changes, including some sites moving to a so-called “pay or consent” model – where visitors are blocked from accessing site content unless they consent to tracking or pay a fee.

Pay or consent is a controversial approach that’s currently being challenged legally and regulatory-wise within the European Union, including by privacy and consumer protection groups. Meta’s implementation of pay or consent can also be suspected of violating the bloc’s fair market principles. (The ICO declined to say whether Meta was one of the positioning owners it contacted about cookie consent.)

In a press release accompanying the report on the outcomes of the cookie banner crackdown, Stephen Bonner, deputy commissioner on the ICO, said the intervention had led to 99 of the highest 100 UK web sites “either already offering meaningful choice in advertising cookies or making changes to get people’s consent”. Which is sort of an either/or.

Bonner’s statement doesn’t provide any data to quantify the actual impact of the ICO on consent selections for UK web users. He says only that “some” of the changes observed included the introduction of a reject all button on sites that previously didn’t have one; others involved sites making their accept all and reject all buttons equally visible; and other sites introduced alternatives corresponding to “agree or pay” – a business model the ICO is “currently reviewing” for legality.

The gold standard for compliance with the UK’s General Data Protection Regulation, which is predicated on the EU framework of the identical name, could be to present website visitors with: easy yes/no selection accept or decline tracking. Sites that fail to accomplish that—for example, by only allowing users to simply accept but not decline tracking, or by making it easy to click a tracking acceptance button but hiding the decline option from multiple menus in confusingly worded settings—needs to be penalized for failing to comply. But too often, they get away with using manipulative, hidden patterns to steal consent.

The ICO must take some of the blame for years of ignoring warnings from privacy activists in regards to the ad tech industry’s unchecked data collection. It also didn’t act decisively by itself concerns in regards to the sector’s data collection practices, as set out in a 2019 report – for example, closing a grievance without issuing a choice in 2020 since it opted for soft industry engagement moderately than vigorous enforcement.

Last yr’s cookie harvesting campaign looks like an attempt by the ICO to finally see itself do something after years of exempting adtech players from compliance. However, its actions may raise questions provided that enforcement has apparently fuelled a rise within the use of controversial ‘pay or agree’ tactics. It’s also interesting to think about the sites it chooses to call and shame in comparison with others that also don’t offer users a transparent yes/no selection, but whose names we have now to infer.

As well as publicly reprimanding Sky Betting, the ICO has decided to call and shame gossip website Tattle Life – which it says was the just one of 53 web sites contacted that didn’t become involved – and said it might now launch an investigation into its use of cookies and its “apparent failure” to register with the ICO.

What about sites which have switched to implementing “agree or pay” cookie banners, meaning they don’t offer web users a free selection to opt out of tracking?

Tech giant Meta entered the sport last yr, deciding to force ad-tracking consent from Facebook and Instagram users by imposing a “pay us or let us track you” paywall on its formerly free social networks. Since then, a growing number of British news sites have imitated the tactic, with “pay or let us” paywalls popping up in all places previously free, ad-supported journalism was available.

We asked the ICO for its views on the creep and growth of “pay or agree”, including Meta’s adoption of the tactic, and a spokesperson referred to Bonner’s previous comments, writing: “Following engagement with Meta, we are investigating how UK data protection law would apply to any potential ad-free subscription service. We expect Meta to consider any data protection concerns we raise before rolling out a subscription service to UK users.”

At the start of this yr, ICO conducted consultations on “pay or consent” business models saying it hopes to supply an initial view of the approach but has not yet adopted a transparent public position. And on this regulatory gray area, loads of “consent or pay(wall)” is happening.

“When it comes to opt-in or pay models, we have told companies that they are not transparent with the public and that they must offer people meaningful choice about how their data is used and shared on their websites,” the spokesperson added. “Some companies have introduced alternative methods of obtaining consent, such as ‘opt-in or pay’, which we are currently considering as a business model following our consultation in early 2024. We will provide our position later in the year. In the meantime, we will continue to monitor developments in new approaches.”

This article was originally published on : techcrunch.com
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Bluesky addresses trust and security issues related to abuse, spam and more

Published

on

By

Bluesky butterfly logo and Jay Graber

Social media startup Bluesky, which is constructing a decentralized alternative to X (formerly Twitter), provided an update Wednesday on the way it’s approaching various trust and security issues on its platform. The company is in various stages of developing and piloting a variety of initiatives focused on coping with bad actors, harassment, spam, fake accounts, video security and more.

To address malicious users or those that harass others, Bluesky says it’s developing recent tools that can have the option to detect when multiple recent accounts are created and managed by the identical person. This could help curb harassment when a foul actor creates several different personas to attack their victims.

Another recent experiment will help detect “rude” replies and forward them to server moderators. Like Mastodon, Bluesky will support a network where self-hosters and other developers can run their very own servers that connect to Bluesky’s server and others on the network. This federation capability is still in early access. But in the long term, server moderators will have the option to resolve how they need to take care of individuals who post rude responses. In the meantime, Bluesky will eventually reduce the visibility of those responses on its app. Repeated rude labels on content will even lead to account-level labels and suspensions, it says.

To curb using lists to harass others, Bluesky will remove individual users from the list in the event that they block the list creator. Similar functionality was recently introduced to Starter Packs, a sort of shared list that will help recent users find people to follow on the platform (check TechCrunch Starter Pack).

Bluesky will even scan lists with offensive names or descriptions to limit the potential of harassing others by adding them to a public list with a toxic or offensive name or description. Those who violate Bluesky’s Community Guidelines might be hidden from the app until the list owner makes changes that align with Bluesky’s policies. Users who proceed to create offensive lists will even face further motion, though the corporate didn’t provide details, adding that the lists are still an area of ​​energetic discussion and development.

In the approaching months, Bluesky also intends to move to handling moderation reports through its app, using notifications relatively than counting on email reports.

To combat spam and other fake accounts, Bluesky is launching a pilot that can attempt to routinely detect when an account is fake, scamming or sending spam to users. Combined with moderation, the goal is to have the option to take motion on accounts inside “seconds of receiving a report,” the corporate said.

One of the more interesting developments is how Bluesky will comply with local laws while still allowing free speech. It will use geotags that allow it to hide some content from users in a particular area to comply with the law.

“This allows Bluesky’s moderation service to maintain flexibility in creating spaces for free expression while also ensuring legal compliance so that Bluesky can continue to operate as a service in these geographic regions,” the corporate shared in a blog post. “This feature will be rolled out on a country-by-country basis, and we will endeavor to inform users of the source of legal requests when legally possible.”

To address potential trust and safety issues with videos which have recently been added, the team is adding features like the flexibility to disable autoplay, ensuring videos are labeled, and providing the flexibility to report videos. They are still evaluating what else might need to be added, which might be prioritized based on user feedback.

When it comes to abuse, the corporate says its general framework is “a question of how often something happens versus how harmful it is.” The company focuses on addressing high-impact, high-frequency issues, in addition to “tracking edge cases that could result in significant harm to a few users.” The latter, while only affecting a small number of individuals, causes enough “ongoing harm” that Bluesky will take motion to prevent abuse, it says.

User concerns will be reported via reports, emails and mentions @safety.bsky.app account.

This article was originally published on : techcrunch.com
Continue Reading

Technology

Apple Airpods Now With FDA-Approved Hearing Aid Feature

Published

on

By

The newest AirPods are a part of a growing group of hearing aids available over-the-counter.


Apple’s latest Airpods could help those with hearing impairments. The tech company’s software update has been approved by the FDA to be used as hearing aids.

The FDA approved Apple’s hearing aid feature on September 12. The free update, available on AirPods Pro 2, will amplify sounds for the hearing impaired. However, the feature is simply available to adults 18 and older with an iPhone or iPad compatible with iOS 18.

“Today’s approval of over-the-counter hearing aid software for a commonly used consumer audio product is another step that will increase the availability, affordability, and acceptability of hearing support for adults with mild to moderate hearing loss,” said Dr. Michelle Tarver, acting director of the FDA’s Center for Devices and Radiological Health, in a press release. obtained by .

They confirmed the feature’s use after a clinical trial with 118 participants. The results showed that users “achieved similar perceived benefits to those who received a professional fit on the same device.” Apple also announced the brand new development just days before the agency’s approval.

“Hearing health is an essential part of our overall well-being, yet it is often overlooked — in fact, according to Apple’s Hearing Study, as many as 75 percent of people diagnosed with hearing loss go untreated,” said Sumbul Desai, MD, vice chairman of Health at Apple. press release“We’re excited to deliver breakthrough software features in AirPods Pro that put users’ hearing health first, offering new ways to test and get help for hearing loss.”

What’s more, Apple intends its recent AirPods to supply a “world-first” hearing health experience. Noting that 1.5 billion people suffer from hearing loss, the device also goals to forestall and detect hearing problems.

“Your AirPods Pro will transform into your own personalized hearing aid, amplifying the specific sounds you need in real time, such as parts of speech or elements of your environment,” Desai added in a video announcing the event.

The latest AirPods are a part of a growing variety of over-the-counter (OTC) hearing aids. They usually are not only more accessible, but additionally significantly cheaper than prescription medical devices. While they’re designed for individuals with mild to moderate hearing loss, they’ll initially treat those with limited abilities.

AirPods Pro 2 is available now for $249.


This article was originally published on : www.blackenterprise.com
Continue Reading

Technology

LinkedIn collected user data for training purposes before updating its terms of service

Published

on

By

LinkedIn scraped user data for training before updating its terms of service

LinkedIn could have trained AI models on user data without updating its terms.

LinkedIn users within the United States — but not within the EU, EEA, or Switzerland, likely as a consequence of data privacy laws in those regions — have the choice to opt out toggle on the settings screen, revealing that LinkedIn collects personal data to coach “AI models to create content.” The toggle isn’t recent. But, as in early reported According to 404 Media, LinkedIn didn’t initially update its privacy policy to handle data use.

The Terms of Service have already been published. updatedbut that sometimes happens well before an enormous change, equivalent to using user data for a brand new purpose like this. The idea is that this offers users the choice to make changes to their account or leave the platform in the event that they do not like the changes. It looks like that is not the case this time.

So what models does LinkedIn train? Its own, the corporate’s says in a Q&A session, including models to put in writing suggestions and post recommendations. But LinkedIn also says that generative AI models on its platform could be trained by a “third-party vendor,” equivalent to its corporate parent Microsoft.

“As with most features on LinkedIn, when you use our platform, we collect and use (or process) data about your use of the platform, including personal data,” the Q&A reads. “This may include your use of generative AI (AI models used to create content) or other AI features, your posts and articles, how often you use LinkedIn, your language preferences, and any feedback you may have provided to our teams. We use this data, in accordance with our privacy policy, to improve or develop the LinkedIn Services.”

LinkedIn previously told TechCrunch that it uses “privacy-enhancing techniques, including redaction and removal of information, to limit personally identifiable information contained in datasets used to train generative AI.”

To opt out of LinkedIn’s data collection, go to the “Data Privacy” section of the LinkedIn settings menu in your computer, click “Data to improve Generative AI,” after which turn off “Use my data to train AI models to create content.” You may try a more comprehensive opt-out through this typebut LinkedIn notes that opting out is not going to affect training that has already taken place.

The nonprofit Open Rights Group (ORG) has asked the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection laws, to research LinkedIn and other social networks that train on user data by default. Earlier this week, Meta announced it was resuming plans to gather user data for AI training after working with the ICO to simplify the opt-out process.

“LinkedIn is the latest social media company to process our data without asking for our consent,” Mariano delli Santi, a lawyer and policy officer at ORG, said in a press release. “The opt-out model once again proves to be completely inadequate to protect our rights: society cannot be expected to monitor and prosecute every internet company that decides to use our data to train AI. Opt-in consent is not only legally required, but also common sense.”

The Irish Data Protection Commission (DPC), the supervisory authority responsible for monitoring compliance with the GDPR, the EU’s general privacy rules, told TechCrunch that LinkedIn had last week announced that clarifications on its global privacy policy could be published today.

“LinkedIn has informed us that the policy will include an opt-out setting for members who do not want their data used to train AI models that generate content,” a DPC spokesperson said. “This opt-out is not available to EU/EEA members, as LinkedIn does not currently use EU/EEA member data to train or tune these models.”

TechCrunch has reached out to LinkedIn for comment. We will update this text if we hear back.

The need for more data to coach generative AI models has led to more platforms repurposing or otherwise repurposing their vast troves of user-generated content. Some have even taken steps to monetize that content—Tumblr owner Automattic, Photobucket, Reddit, and Stack Overflow are among the many networks licensing data to AI model developers.

Not all of them made opting out easy. When Stack Overflow announced it will begin licensing content, several users deleted their posts in protest — only to see those posts restored and their accounts suspended.

This article was originally published on : techcrunch.com
Continue Reading
Advertisement

OUR NEWSLETTER

Subscribe Us To Receive Our Latest News Directly In Your Inbox!

We don’t spam! Read our privacy policy for more info.

Trending