TORONTO -- THERE may be no U.S. privacy czar or constitutional law about privacy, but the U.S. model still effectively punishes privacy violators, a U.S. Federal Trade Commission (FTC) official said at the Computers, Freedom and Privacy conference held here this week.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
• Research Reports  (CIO)
• Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
The FTC has been "very active" in pursuing companies that violate consumers' privacy under the U.S. model of self-regulation, said Mozelle Thompson, a commissioner with the FTC.

The U.S. model calls for companies to voluntarily adhere to policies they devise and publicize or adhere to the policies set by the particular industry group, such as marketers, to which they belong. There are pointed exceptions: some industries, such as the financial industry, are governed by federal regulations with which they must comply. However, according to the model's theory, people who disagree with the policies of a company that is not in a compulsorily regulated industry can take their business elsewhere. By contrast, nations in the European Union typically have explicit laws governing the privacy of personal data.

But that does not mean there is not a right to privacy in the United States any more than it means Europeans are better protected, Thompson said. "The Europeans have a privacy directive, but that's not going to give [them] more privacy."

Under the American system, if companies violate policies that they claim to follow, the FTC goes after them, Thompson said. In fact, the FTC has brought 120 actions against people or companies for fraud and deception over the last two-and-a-half years alone, he said.

For example, last year the FTC shut down a Web site that was deceptively selling "U.S. consumer protection seals" for $1000, Thompson said. In partnership with other organizations, the FTC last month tagged more than 1,600 Web sites suspected of trying to lure people into participating in bogus get-rich-quick business propositions.

Asked why it was sensible to pass a law protecting consumers from credit card theft -- consumers' liability is limited to $50 -- but not sensible to pass laws protecting privacy, Thompson said the credit-card law was "developed after a long policy discussion."

A discussion on privacy protection may be taking place now. For the past three years, the FTC has been involved with surveying how well the self-regulation model is protecting people's privacy. Based on the most recent report, issued last July, a majority of commissioners voted against recommending passing legislation, even as they noted that businesses must do more to address consumers' concerns.

Thompson said he was part of that majority, although he is worried that there may always be some companies that behave in a deceptive and fraudulent manner. Still, the potential existence of a persistent group who will not play fair does not necessarily mean the United States should seek a legislative remedy, according to Thompson.

It is very dangerous to set down a set of codes and regulations pertaining to technology because such rules become out of date so quickly, Thompson said.

Moreover, American consumers do not necessarily trust the U.S. government having a role in protecting their privacy, according to Thompson. Instead, the government should emphasize its role as an educator, he said.

"We have to do a better job educating consumers individually about steps they can take themselves," Thompson said.