Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

FTC’s Challenge: Protecting Privacy Without Hurting Innovation

NEW YORK – GIGAOM STRUCTURE DATA CONFERENCE – The U.S. Federal Trade Commission has the tricky task of protecting consumer privacy in the age of Big Data and ubiquitous data collection without stifling innovation, a deputy director with the agency said at a conference this week.

NEW YORK – GIGAOM STRUCTURE DATA CONFERENCE – The U.S. Federal Trade Commission has the tricky task of protecting consumer privacy in the age of Big Data and ubiquitous data collection without stifling innovation, a deputy director with the agency said at a conference this week.

When it comes to Big Data, the FTC has typically focused on the negative aspects, such as the inevitable concerns over consumer privacy, but it recognizes there have also been “huge innovation,” Daniel Kaufman, the Deputy Director for the FTC’s Bureau of Consumer Protection, told attendees on Wednesday at GigaOm’s Structure Data conference in New York City. Data collection is not always something sinister as there are plenty of practical—and beneficial—applications in healthcare and other areas. 

It’s a balancing act for the FTC.

“For us we have to look at the entire ecosystem and make sure all the players are doing what they should be doing and what the law allows,” Kaufman said.

One challenge for the FTC is to keep up with privacy implications even while the technology is changing so rapidly. The agency has a “mobile lab” where teams of technicians and attorneys work together to analyze how apps handle user data.

The FTC fined Android flashlight app developer GoldenShores last year for not disclosing in its privacy policy that user data was being shared with an advertising network.

In the near future, the agency will be paying a lot of attention to apps to ensure children’s data is protected online. Websites and mobile app developers need to think about their approach for how they get permission for children’s data and how the information is used.

It’s important to note the FTC isn’t just focused on apps, but also on the mobile device and its underlying platform, such as when the agency went after HTC for security vulnerabilities in its software, Kaufman said.

Advertisement. Scroll to continue reading.

A recent workshop on the Internet of Things highlighted the challenges of collecting data that wasn’t necessarily personal if collected just once, but could be personal when collected repeatedly over a period of time. “Having information about you in one spot but [also] where you travel and go creates a lot of challenges,” Kaufman said.

Another challenge lies in the fact that there are a lot of organizations involved in Big Data and data collection “that have not traditionally focused on privacy by design,” Kaufman said. These organizations aren’t used to thinking about consumer privacy and data security.

“We want to be mindful of individual privacy,” Kaufman said.

The FTC recently issued requests for information from nine different data brokers to figure out just what these entities do with the information they aggregate from disparate sources. The requests included questions about who the data was shared with, what kinds of restrictions are there on how the data can be used, and what is being done with the data. Consumers generally have no idea who the data brokers or what the vast majority of brokers even do with their data, Kaufman noted.

The FTC plans to release a report summarizing its findings sometime this year.

The report will hopefully shed some light on an industry, which has “enormous impact on consumers, but very little transparency,” Kaufman said.

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

Malware & Threats

Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down.

Mobile & Wireless

Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.

Mobile & Wireless

Infonetics Research has shared excerpts from its Mobile Device Security Client Software market size and forecasts report, which tracks enterprise and consumer security client...

Cybercrime

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of...

Fraud & Identity Theft

A team of researchers has demonstrated a new attack method that affects iPhone owners who use Apple Pay and Visa payment cards. The vulnerabilities...

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Mobile & Wireless

Critical security flaws expose Samsung’s Exynos modems to “Internet-to-baseband remote code execution” attacks with no user interaction. Project Zero says an attacker only needs...