managing privacy maximizing data in affiliate marketing gary kibel
DESCRIPTION
Affiliate marketing thrives on valuable data, such as lead gen, email marketing and campaign results/statistics. Privacy, data and security issues are critical today, especially in an industry where valuable data is a competitive advantage.Gary Kibel, Partner, Davis & Gilbert LLP (Twitter @GaryKibel_law)TRANSCRIPT
![Page 1: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/1.jpg)
1
MANAGING PRIVACY & MAXIMIZING DATA IN AFFILIATE MARKETING
Gary Kibel
Partner
Davis & Gilbert LLP
212.468.4918
![Page 2: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/2.jpg)
2
PRIVACY & SECURITY IN AMERICA
“Any society that would give up a little liberty to gain a
little security will deserve neither and lose both.” Benjamin Franklin, Founding Father
“You have zero privacy anyway. Get over it!”
Scott McNealy, CEO Sun Microsystems
![Page 3: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/3.jpg)
3
1. Understand where the data is coming from
2. Understand who owns the data
3. Understand how to legally use the data
4. Know when to ask questions
5. Don’t be deceptive!
KEY PRESENTATION TAKEAWAYS
![Page 4: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/4.jpg)
4
CONSUMER EXPECTATIONS
![Page 5: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/5.jpg)
5
http://www.ftc.gov/reports/privacy3/fairinfo.shtm Notice Choice Access Security Enforcement
It’s all about transparency & consumer expectations
FTC Fair Information Practice Principles
![Page 6: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/6.jpg)
6
CONSUMER-FACING PRIVACY POLICIES
![Page 7: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/7.jpg)
7
![Page 8: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/8.jpg)
8
PRIVACY POLICIES ENFORCEABILE
Greer v. 1-800 Flowers.Com Inc. (Texas – 2007)
Facts Privacy Policy violation Internal Controls
![Page 9: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/9.jpg)
9
INDUSTRY – SPECIFIC PRIVACY LAWS
![Page 10: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/10.jpg)
10
![Page 11: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/11.jpg)
11
CHILDRENS ONLINE PRIVACY PROTECTION ACT “COPPA”
All website operators who intend to reach children under the age of 13 or have actual knowledge (regardless of the age group targeted by their website) that children under the age of 13 visit their website must: Post a privacy policy Obtain “verifiable parental consent” Advise parent/legal guardian that they can review the
child's personal information Establish and maintain reasonable security
procedures
![Page 12: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/12.jpg)
![Page 13: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/13.jpg)
13
SOCIAL NETWORKING SITES – COPPA VIOLATIONS
Maintained a blogging and social networking service Collected, used, and disclosed personal information
from children under the age of 13 without first notifying parents and obtaining their consent
Age verification system was: (1) suggestive and (2) faulty
1.7 million accounts created by children under the age of 13
Result = $1,000,000 fine
![Page 14: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/14.jpg)
14
DATA SECURITY & STATE SECURITY BREACH NOTIFICATION LAWS
![Page 15: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/15.jpg)
15
SECURITY BREACHES
ChoicePoint Bank of America CardSystems Department of Veteran Affairs TJ Maxx BJs
![Page 16: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/16.jpg)
16
STATE SECURITY BREACH STATE NOTIFICATION LAWS
California SB 1386 (2003)
Now 44 states have security breach notification laws
Most generally apply to unencrypted personal information of consumers
![Page 17: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/17.jpg)
17
STATE OF NEVADA
Effective October 1, 2008
“A business in this State shall not transfer any personal information of a customer through an electronic transmission other than a facsimile to a person outside of the secure system of the business unless the business uses encryption to ensure the security of the electronic transmission.”
![Page 18: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/18.jpg)
18
COMMONWEALTH OF MASSACHUSETTS
Effective January 1, 2010
“Every person that owns, licenses, stores or maintains personal information about a resident of the Commonwealth shall develop, implement, maintain and monitor a comprehensive, written information security program…”
![Page 19: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/19.jpg)
19
FEDERAL TRADE COMMISSION GUIDANCE
A sound data security plan is built on 5 key principles:
1. Take stock. Know what personal information you have in your files and on your computers.
2. Scale down. Keep only what you need for your business.
3. Lock it. Protect the information that you keep.
4. Pitch it. Properly dispose of what you no longer need.
5. Plan ahead. Create a plan to respond to security incidents.
![Page 20: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/20.jpg)
20
EMERGING TECHNOLOGIES
![Page 21: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/21.jpg)
21
![Page 22: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/22.jpg)
22
![Page 23: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/23.jpg)
23
BEHAVIORAL ADVERTISING
Federal Trade Commission – December 20, 2007Online Behavioral Advertising – Moving the Discussion Forward to Possible Self-Regulatory Principles
Transparency and consumer control Reasonable security, and limited data retention, for
consumer data Affirmative express consent for material changes to
existing privacy promises Affirmative express consent to (or prohibition against)
using sensitive data for behavioral advertising
![Page 24: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/24.jpg)
24
Federal Trade Commission (Staff Report) – February 2009 Generally maintained the 4 principles Excluded “first party” behavioral advertising and
contextual advertising from the principles Distinction between PII and non-PII is no longer
determinative Data retention = only as long as necessary Be creative for non-web site disclosures Did not resolve the opt-in v. opt-out debate Did not further define “sensitive data”
BEHAVIORAL ADVERTISING
![Page 25: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/25.jpg)
25
BEHAVIORAL ADVERTISING
AAAA/ANA/DMA/IAB – July 2009 7 principles: Education; Transparency; Consumer
Control; Data Security; Material Changes; Sensitive Data; Accountability
Basically, FTC + tagging ads + industry enforcement
![Page 26: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/26.jpg)
26
PARTIES IN THE BEHAVIORAL MARKETING ECOSYSTEM
Advertisers
Ad Agencies
Publishers
ISPs
End Users Content DeliveryNetworks
Ad Networks
Ad Servers
![Page 27: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/27.jpg)
27
![Page 28: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/28.jpg)
28
DON’T BE DECEPTIVE IN CREATING DATA
New York AG v. Lifestyle Lift (July 2009)
Employees published positive reviews on message boards
Employees did not identify themselves as Lifestyle Lift employees
$300,000 fine
![Page 29: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/29.jpg)
29
DON’T BE DECEPTIVE IN CREATING DATA
Twitter Hashtag Spam
European furniture maker “#MOUSAVI Join the database for free to win a £1,000
gift card” Bad PR
![Page 30: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/30.jpg)
30
SOCIAL NETWORKING DATA
![Page 31: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/31.jpg)
31
1. Understand where the data is coming from
2. Understand who owns the data
3. Understand how to legally use the data
4. Know when to ask questions
5. Don’t be deceptive!
KEY PRESENTATION TAKEAWAYS
![Page 32: Managing Privacy Maximizing Data In Affiliate Marketing Gary Kibel](https://reader033.vdocuments.mx/reader033/viewer/2022060109/55560a1ed8b42a3f168b4c14/html5/thumbnails/32.jpg)
32
MANAGING PRIVACY & MAXIMIZING DATA IN AFFILIATE MARKETING
Gary Kibel
Partner
Davis & Gilbert LLP
212.468.4918
Alan ChapellJD, CIPPChapell & [email protected]