About this Issue

Addressing privacy issues around advertising technology and online tracking has been a key component of the Future of Privacy Forum’s work since its founding eight years ago. Increasingly, the mobile advertising space and location technologies are at the forefront of innovative new consumer offerings and emerging privacy questions about how to appropriately handle consumer data. It is not surprising that complex tracking and audience measurement technologies can raise both consumer concerns and regulator interest.

Read more

Legal & Regulatory Resources:

  • French Council of State Opinion (Feb. 8, 2017). Read original in French; Read FPF’s translated version in English. In this opinion, the highest administrative court of France upheld a decision by the CNIL to deny authorization to an outdoor advertising corporation to implement a four-week program of measuring pedestrian traffic in La Defense Plaza near Paris. The proposed method involved collection of MAC addresses from WiFi “counting boxes” installed on street furniture, to be followed by truncation of the MAC address, salting, and hashing. The decision was based primarily on France’s 1978 data protection law, which defines “personal data” broadly (“[I]t is clear from the definition of personal data [in the 1978 law] that such data can only be regarded as anonymous when the identification of the concerned person, directly or indirectly, becomes impossible by the data controller or a third party. This is not the case where it is still possible to individualize a person or to link data between two records that concern him or her.”).

More Resources:

New technologies, which rely on the fact that most people carry a mobile device, now allow venues such as airports, stores, and hotels to receive signals from devices that are in or near them.  If your mobile device has Wi-Fi or Bluetooth turned on, it broadcasts a unique number – called a MAC address – that can be logged by Wi-Fi equipment or Bluetooth sensors.  A MAC address is simply a 12-character string of letters and numbers; it doesn’t contain personal information like your name, email address, or phone number.

Since a MAC address is unique to each device, special analytics software can be used to generate reports about customer traffic in a store based on the MAC addresses that are detected at any given time (see sample reports here). For instance, a venue can learn how many unique customers walk into it, and the path customers take as they move around.  A venue can then use this information to improve customer service – by making sure there are enough employees available, reducing wait times, or improving venue layouts.

Mobile location analytics companies that have agreed to FPF’s Mobile Location Analytics Code of Conduct, which was announced with Senator Schumer (D-NY) in October, will honor the requests of consumers who wish to opt-out of having their location collected. Consumers opt-out by entering their phones’ Wi-Fi or Bluetooth MAC address at smart-places.org.

“Your Phone May Be Tracking Your Every Move; Here’s How to Stop It”

May 22, 2017 | FPF Staff

“Your Phone May Be Tracking Your Every Move; Here’s How to Stop It”

During the International Association of Privacy Professional’s Global Privacy Summit 2017, FPF’s CEO, Jules Polonetsky, took a moment to speak with NBC 4 Los Angeles about the privacy implications of granting apps permission to track your location.

Read More

What's Happening: Mobile Location Analytics

In-Store Location Tracking: A Holiday Guide
Top Story

December 22, 2015 | Stacey Gray

In-Store Location Tracking: A Holiday Guide

In these final remaining days before Christmas, last-minute holiday shopping is in full swing. The window for online delivery is closing, and more shoppers this week will be doing their holiday shopping the old-fashioned way—in the store.

Read More
Future of Privacy Forum Releases Statement on FTC’s Settlement with Retail Tracking Company
FTC Director of Consumer Protection Praises MLA Code