Important Developments within Behavioral Advertising in Europe

Behavior advertising is not solely a contemporary and hotly debated issue on these shores. Case in point, last month the influential Article 29 Working Party ("Working Party"), consisting of all the European Union's national data privacy regulators, adopted Opinion 2/2010 on online behavioral advertising (the "Opinion").

The Working Party has made it clear they are taking on the challenge of creating better checks and balances for digital advertising through its national implementation of amended Directive 2002/58/EC (the "ePrivacy Directive"). This Directive calls for a complete overhaul of existing technology and practice, including currently available browsers and opt-out mechanisms, thereby seeking to achieve the level of informed consent from users which they claim the national law requires.

To view the entire alert please click here. This alert was written by Cynthia O'Donoghue and Nick Tyler of Reed Smith in London, England. For additional information please contact one of the authors.

There is an 'I' in Behavioral Advertising

Coming soon to many websites near you (possibly…), you may find a slew of little blue “I” icons populating the Internet. This icon represents the latest collaboration between the Federal Trade Commission, Congress and the advertising industry to create a standardized icon, known as the “Power I,” intended to notify consumers of the online behavioral advertising practices and policies that are followed by specific websites and advertisers. Online behavioral advertising is essentially the practice carried out by some advertisers to collect and use consumers’ surfing history, demographic profiles and other personal data to deliver ads tailored to their unique and individual interests. More formally, online behavior advertising is “the collection of data from a particular computer or device regarding Web viewing behaviors over time and across non-Affiliate Web sites for the purpose of using such data to predict user preferences or interests to deliver advertising to that computer or device based on the preferences or interests inferred from such Web viewing behaviors.”

The “I” is intended to essentially function as both a trusted standard in the area of behavior advertising that consumers will immediately identify, and also as a link that, when clicked on, will take a user to a separate web page detailing why particular ads are being shown to him or her. Although websites or ads are not legally required to post the “I,” the leading trade associations behind this initiative are clearly hoping that the advertising industry will adopt this new measure, and thereby avoid the need for further government action and regulation. A detailed description / PR campaign of the “Power I” initiative has already been launched and can be accessed here, and a second PR campaign is underway.

While it’s far too early to gauge the effects of the Power I, its rate of adoption among industry players, and its success in staving off governmental action, this program is certainly an important step in the right direction, namely, a step toward further transparency and consumer education. This author wants to know if we’re likely to see a “Power C” for user consent and/or a “Power R” for data retention practices.

Déjà Google

Give Google credit that when it announced its acquisition of AdMob, a leading provider of mobile advertising services and technology, in November 2009, it proactively addressed the likelihood of a Federal Trade Commission (FTC) investigation into the transaction. Google even went as far as posting a web page that the media, regulators and other interested parties alike could access that explained why it believed the deal did not pose any “competitive” (note: antitrust) concerns.  Whether it was a self-fulfilling prophesy or just an inevitable step whenever Google makes an acquisition in the digital advertising space, Google last week announced it received a second request for information from the FTC on the AdMob acquisition. This, however, is familiar territory for Google, which has been the target of government scrutiny over previous deals. The FTC held an eight-month investigation into Google's plan to buy DoubleClick Inc. in 2007 before approving that transaction, and last year Google walked away from a search deal with Yahoo after the U.S. Justice Department indicated that it would consider blocking the agreement and strategic alliance.

What Google may not have expected is the data privacy and consumer protection industry group backlash that has taken up the not-yet-completed transaction as a struggle to protect consumer data and the mobile advertising market. At least two prominent consumer groups reportedly approached the FTC, asking it to block the acquisition, arguing that a Google/AdMob combination would put “significant amounts of data for tracking, profiling and targeting” of U.S. mobile consumers into the hands of a single advertising network. Google and AdMob combined will form the largest mobile-advertising company, with 30 to 40 percent of the market, according to Karsten Weide, an analyst with researcher IDC in San Mateo, California. These groups want the FTC to consider whether Google's access to AdMob's technology will give it an unfair advantage in selling mobile advertising.

Understandably, Google has asserted that the economic/market impact of such an acquisition would be almost impossible to measure against the dozens of other mobile ad networks that compete with AdMob on a daily basis. Moreover, a spokesperson for Google has suggested the deal will provide users with more free mobile applications, in some cases as an alternative to pay-to-download apps, since it will allow developers to subsidize their products through better and more targeted mobile advertising.

One interesting issue that has arisen from this and other similar transactions over the past couple of years is whether and how consumer privacy fits into an FTC antitrust analysis. It is well documented that the FTC primarily rests its antitrust analysis on two categories: (i) agreements that are per se illegal, and (ii) agreements that are analyzed under the Rule of Reason. Types of agreements that have been held per se illegal include agreements among competitors to fix prices or output, rig bids, or share or divide markets by allocating customers, suppliers, territories, or lines of commerce. On the other hand, agreements not challenged as per se illegal are analyzed under the Rule of Reason to determine their overall competitive effect. A Rule of Reason analysis entails a flexible inquiry and varies in focus and detail, depending on the nature of the agreement and market circumstances. While this analysis still begins with a review of the primary agreement (e.g., merger, joint venture, license, etc.) driving the FTC’s analysis, it will then extend to other external factors.

Largely until 2007 and the Google/DoubleClick transaction, the issues and types of analysis described above were primarily centered on consolidations and combinations of goods and services, and not privacy or consumer information. During the FTC’s review of Google’s acquisition of DoubleClick, however, all five FTC commissioners who reviewed that transaction agreed that data privacy can constitute a form of non-price competition under a Rule of Reason analysis and, where/when appropriate, should be considered as one of many pieces in their study and review of a prospective transaction. In fact, the FTC, in its decision approving the Google/DoubleClick transaction, provided, “We investigated the possibility that this transaction could adversely affect non-price attributes of competition, such as consumer privacy.” At the core of the FTC’s review was whether, given the nature and economics of online and digital advertising, the concentration of user information that results from a Google/DoubleClick combination meant that no other company would be able to buy, target and optimize ads as profitably, thereby substantially reducing the ability of other ad networks to compete.

On what basis, then, is consumer privacy evaluated? Proponents have successfully argued that privacy harms can reduce consumer welfare, which is a principal goal of modern antitrust analysis. In addition, these same groups have argued that privacy harms can lead to a reduction in the quality of a good or service, which is a standard category of harm that results from excessive market power. On the other hand, those who oppose the incorporation of a privacy review in any antitrust analysis generally rest their argument on two points: (i) they disagree that privacy is a competition-related issue and point to precedents in which non-competition issues (like pollution) have not been traditionally factored into an antitrust analysis, and (ii) these transactions have proved themselves to create market efficiencies and improved offering/technology that ultimately benefit consumers with a more personalized online experience. This latter opinion may best be summarized in a Yahoo statement from 2008: “The advertising model has made Internet content and services available to millions of people in the United States and around the world—for free. The business model of relying on advertising revenue to fund websites has meant that vast amounts of information on the Internet has been fully accessible to people of all ages and income levels.”

Why this Matters: 

Those who ignore history are doomed to repeat it. Our economy today is flush with companies that have been created to essentially trade in almost every aspect of behavioral advertising and consumer data. In fact, one might argue that consumer data has become a currency of sorts in the digital advertising and media industries. As consumer privacy becomes, on the one hand, increasingly protected by both legislation and self-regulatory initiatives (leaving aside the even more complex discussion of the implications of cross-border transactions and acquisitions where the same piece of consumer data may be subject to varying laws), and also a valuable commodity that is highly sought after, companies should be more aware of the legal implications associated therewith in all spheres of their business – including the arena of mergers and acquisitions. Whether one agrees that consumer privacy should be factored into an FTC antitrust analysis or not, it seems unlikely that the FTC will shift from the position it seems to have taken (as evidenced by the Google/AdMob transaction) over the past couple years, and therefore, companies that are contemplating mergers or acquisitions in the digital media and advertising arenas should at least consider the implications that consumer privacy may have on their deals.

Advertising and Online Music: An Overview

This post was written by Laura Hicks.

This article was previously published in Media & Marketing Online.

It is no secret that the consumer habits for accessing and consuming music are changing incredibly quickly. In December 2009, radio audience measurement body Rajar revealed that 4.5 million people in the UK regularly use personalised online radio services, an increase of 1.6 million from October 2008. These figures reflect the explosive growth in online music consumption over the past year and highlight the potential gains to be made by advertisers who target the ad-supported music services sector. In this article, we will look at some of the major online music services and then outline key developments and opportunities to be aware of when considering this new market proposition.

The most successful online music service providers (both in terms of subscriber numbers and press coverage) rely at least partly on advertising to help cover the significant operational cost of obtaining the licences necessary to make premium content available to the public. Last.fm is the largest, with over 30 million users. The service, part ad-funded and part subscription funded, differentiates itself with its “scrobbling” system, which recommends songs to users based on their musical taste. Users can also engage with the Last.fm community through the site’s social networking features or create custom radio stations and playlists from the Last.fm music library. Spotify’s service has turned column inches into subscriber numbers, boasting an ad-supported streaming service with over 6 million users, around half of whom are in the UK. It comprises both Spotify Free, with commercial breaks, and Spotify Premium, which is ad-free. And We7, with over 2.5 million users and 4 million tracks available for streaming in the UK is a predominantly ad-based service. Each time a user plays a track the site has four opportunities to show an advertisement targeted at the user.

Until these newer services offered a legitimate alternative to illegal peer to peer file sharing networks, advertisers and brands were understandably cautious about being associated with online music sites. So, how should you make the most of the opportunities now available in the legal online music ecosystem?

The commercial value is obvious; the proliferation of personalised music services allows more effective and targeted advertising. Let’s take an example: If an advertiser wishes to sell trainers endorsed by, say, Jay-Z, they will wish to target fans of Jay-Z (and other similar artists). Personalised services provide a demographic identification service which is invaluable. If a sportswear brand wants to target fans of hip hop or other urban music, they can now do so, and better still, they can engage with them in ways not previously possible with traditional advertising.

Behavioural targeting uses information collected about an individual's online behaviour, such as the pages they have visited or the searches they have made, to select which advertisements to display to that individual. This helps advertisers deliver online advertisements to the users who are most likely to be influenced by them, thereby making campaigns more effective. Because of the individual nature of the information used to identify users, the law and regulations dealing with this kind of advertising are subject to constant review. For example, under European e-privacy law, it will soon be a requirement that a user’s consent is actively obtained before cookies are employed to identify user preferences.

Looking forward, the partnership between artists and brands will continue to strengthen and develop, with artists such as Mariah Carey already breaking new ground. Those who bought her most recent album in certain markets were given a copy of an Elle magazine special edition dedicated to the singer. This collaboration demonstrates the shift from traditional advertising where a celebrity is used to promote a brand; here, it was Elle that effectively promoted the singer.

As artists and brands become more aligned, businesses dedicated to helping brands connect with their consumers through music are prospering. Organisations like VerveLife, a digital music marketing organisation, have established new promotion and distribution channels for thousands of content publishers, such as artists, movie producers, television and game distributors. Companies like Starbucks, Toyota and Burger King have recently sought to reach a particular demographic by focusing on the music that potential consumers listen to.

Along with these emerging models, new legal issues have inevitably arisen. Many of these typically emanate from the existing contractual relationship between artist and recording label. Record labels are increasingly trying to capture the ancillary revenue streams of artists by negotiating 360 record deals which may in turn affect the ability of an artist to engage with a brand. It is also important to be aware of who owns what copyright in music, and what rights need to be cleared.

As the scope and popularity of online entertainment services grows and the level of user-interactivity develops, the online music sphere will continue to provide numerous opportunities for brands and advertisers to connect with music fans in an aspirational way. The new breed of legal online music services offer a dynamic platform for advertisers and brands to reach a targeted and valuable audience.

Reminder: Global Regulation of Behavioral Marketing Teleseminar

As behavioral marketing becomes an increasingly important and embattled area both from within government ranks and industry, with implications extending far beyond merely advertising to e-commerce, privacy, global compliance and more, you won’t want to miss Reed Smith’s tele-seminar tomorrow (Wednesday, September 30 at 12 p.m. (EDT)) on the topic of "Global Regulation of Behavioral Marketing". Join moderator Doug Wood as he probes the issues with Joe Rosenbaum (New York) and Gregor Pryor (UK) for a 45-minute discussion, followed by a Q&A period to address your specific concerns. It’s still not too late to sign up for, and participate in, this important seminar.

To view the invitation, please click here.

To register for this event, please click here.

Global Regulation of Behavioral Marketing Teleseminar

In response to the global needs of our clients, Reed Smith is pleased to announce the next installment of our 2009 "Doing Business Globally" teleseminar programs, a series focused on issues that companies should understand about doing business in the global marketplace.

Our next teleseminar will take place Wednesday, September 30 at 12 p.m. (EDT), and will focus on "Global Regulation of Behavioral Marketing." This teleseminar explores the labyrinth of global regulation of targeting consumers—on and off the web—through behavioral marketing. Regulators and consumerists object to such sophisticated techniques, fearful that it further erodes what little privacy protection remains, and that it violates data protection laws. Marketers respond that such advances allow for a far more efficient and consumer-friendly marketplace, pointing out that the personal information retrieved is not on a "one-on-one" target but on aggregate marketing to a large group of consumers with similar demographic and psychographic profiles. The two sides are far apart, and understanding the legal minefield is critical for every marketer.

Join moderator Doug Wood as he probes the issues with Joe Rosenbaum (New York) and Gregor Pryor (UK) for a 45-minute discussion, followed by a Q&A period to address your specific concerns.

Douglas Wood is a partner in Reed Smith's New York office and head of the firm's Media & Entertainment Industry Group, and co-chair of the firm’s global Advertising Technology & Media practice. He has more than 30 years' experience representing national and multinational companies in advertising, marketing, promotions, unfair competition, intellectual property, and e-commerce matters.

Joseph Rosenbaum is a partner in Reed Smith's New York office and co-chair of the firm’s global Advertising Technology & Media practice. Joe focuses on law and policy relating to digital, online and interactive advertising & marketing, e-commerce & information technology, digital content, media & entertainment law, online and interactive gaming & promotions, and privacy & data protection.

Gregor Pryor is a partner in Reed Smith's London office and a member of the Advertising Technology & Media team. Gregor advises clients concerning data protection and privacy matters, particularly in relation to online operations and targeted advertising.

To view the invitation, please click here.

To register for this event, please click here.

Are self-regulatory ad guidelines sufficient to satisfy federal regulators?

Reprinted with permission from Mobile Marketer at http://www.mobilemarketer.com.

Earlier last month the leading media, advertising and marketing trade associations, including the American Association of Advertising Agencies, Association of National Advertisers, Interactive Advertising Bureau, Direct Marketing Association and the Better Business Bureau, representing an overwhelming majority of industry participants, released their Self-Regulatory Principles for Online Behavioral Advertising (the “principles”), with the objective of protecting consumer privacy in ad-supported interactive media.

These generally follow the advisory principles that were released in February 2009 by the Federal Trade Commission. In fact, upon the FTC’s release, then-commissioner Jon Leibowitz remarked that anything industry can do to adopt, promulgate and enforce the principles represents “the last clear chance to show that self-regulation can – and will – effectively protect consumers’ privacy in a dynamic online marketplace.”

The principles were aimed at the following categories: education, transparency, consumer control, data security, material changes, sensitive data and accountability. Each principle is well thought out and tailored to specific areas within the universe of online behavioral advertising.

These principles can be summarized, in part, as follows:

  1. Educate consumers and businesses about online behavior advertising.
     
  2. Disclose and inform consumers about data collection and use practices, including various forms of notice that may be required depending on the nature of the data collected and the party collecting it.
     
  3. Give consumers options regarding the collection, use and sharing of information to non-affiliates.
     
  4. Require service providers and carrier networks – for example, non-first or third parties – to obtain consent before a user’s data may be used for behavioral advertising.

    Thereafter, the data may only be obtained for as long as necessary to fulfill a legitimate business need, or as required by law.
     
  5. Special treatment afforded to sensitive information, such as medical and financial information, as well as information from users under the age of 13.

    Moreover, service providers engaged in online behavioral advertising should undertake steps to help preserve the de-identified status of data collected and used if and when that data is shared with non-affiliates.
     
  6. Entities should maintain appropriate physical, electronic and administrative safeguards to protect the data collected and used for online behavioral advertising purposes.
     
  7. A user’s consent must be obtained before either a Web site or some other third party uses the previously collected data for materially different behavioral advertising purposes. Typically, a material change would be a more expansive collection or use of data than previously disclosed to the user.
     
  8. Establish accountability processes that should consist of monitoring programs, complaint procedures, reporting and compliance requirements, enforcement and public disclosures of offenders.

Does any of this sound familiar?

As early as 2007, many leading agencies, aggregators and publishers throughout the mobile marketing industry have stood behind most of these same principles and incorporated them into various codes of conduct and best practices.

Less talk, more teeth

Albeit in a somewhat different medium, the commonalities between data collected via the Web and that which is collected by mobile marketers are substantial.

Appreciating the sensitivity of a person’s confidential and/or personally identifiable information and the harm that can result from misuse, the mobile marketing industry instituted similar policies, including:

  1. Notice: Mobile marketers are required to inform consumers of the marketer’s identity and products/services offered, as well as the key terms and conditions that will govern the interaction between a marketer and the user.
     
  2. Consent: Mobile marketers must ask for and obtain explicit opt-in consent by a user for each mobile marketing program. Consent may not be carried into other marketing programs unless the user has consented to such communications.
     
  3. Constraint: Mobile marketers must limit and target the mobile messages to that which the user requested.
     
  4. Security: Mobile marketers must implement reasonable technical, administrative and physical procedures to protect the user information that is collected in connection with mobile marketing programs.

The one area in which the principles clearly extend beyond the codes of conduct and best practice documents born out of mobile marketing is in the area of enforcement and accountability.

For example, the Mobile Marketing Association has seemingly acknowledged its limited enforcement capabilities by stating in its Code of Conduct that “… until the Code can be enforced effectively by a third-party enforcement organization, mobile marketers are expected to use evaluations of their practices to certify compliance with the Code.”

In contrast, the Web principles expressly state in one place that “… any actions taken with respect to instances of non-compliance with be publicly reported by the programs” and in another, “When an entity engaged in [O]nline [B]ehavior [A]dvertising is informed by a program regarding its non-compliance with the Principles … The programs will send the public reports of uncorrected violations to the appropriate government agencies.”

Moreover, the Council of Better Business Bureaus, along with the Direct Marketing Association, has agreed to implement accountability programs to promote widespread adoption of the Web principles.

The one question that many industry experts are still asking themselves is whether the self-regulatory principles instituted by both Web and mobile industry players is sufficient to keep the federal government on the sidelines.

There still appears to be strong indications to suggest that Congress will be taking its turn by enacting general consumer privacy legislation, which may provide some absolute protections, and give both the FTC and Federal Communications Commission greater authority to regulate in this area.

Interestingly, Chairman Boucher of the FCC keyed in on this theme when he was asked during some recent hearings in Washington how statutory and regulatory regimes could exist on top of a self-regulatory one and how would consumers know where to turn in such a maze?

While the similarities between the Web principles and the mobile industry’s primary code of conduct are striking though not all that surprising, the uniform message that is being conveyed by all concerned participants in the digital advertising industry is clear – a new day has arrived in which transparency, education and reasonable choice for consumers must be part of the online advertising industry’s best practices.

The successful marketers going forward will be those that understand and appreciate this message, and build cultures which foster – rather than circumvent – respect for the consumer while continuing to market, advertise and promote the goods and services which are so intertwined in our daily lives.

Reprinted with permission from Mobile Marketer at http://www.mobilemarketer.com.

Self-Regulatory Online Behavioral Advertising Principle No. 1: Education

In collaboration with our sister blog, LegalBytes, we're jointly taking on the recently disseminated Self-Regulatory Principles for Online Behavioral Advertising, topic by topic, to explain these Principles in a way that our readership can better understand. Please check back with us on a weekly basis as we tackle each of these 7 Principles.

New Federal Privacy Bill in the Works: Behavioral Advertising "Beneficial," But Must Be Done "Appropriately"

On June 18, 2009, Congressman Rick Boucher (D-Va.) participated in a House subcommittee hearing on behavioral advertising, and gave an opening speech in which he outlined his desire to introduce behavioral advertising legislation for consideration by this Congress. In this speech, Congressman Boucher admitted to being both a supporter and beneficiary of targeted advertising, and he recognized that “online advertising supports much of the commercial content, applications and services that are available to Internet users without charge.” By his own admission, his proposed legislation will not disrupt this business model. The full text of Congressman Boucher’s speech can be read here.

In the approximately seven weeks since giving this speech, Congressman Boucher has revealed little about how he intends to craft legislation that is sensitive both to the commercial needs of online businesses and the privacy needs of consumers. Last week, in a speech given to The Congressional Internet Caucus Advisory Committee during the State of the Net West conference, Congressman Boucher gave a preview of the privacy bill he is planning to introduce in the near future. 

Based upon the excellent recap from Professor Eric Goldman (who helped organize the event), and first-hand accounts of a number of twittering attendees, we can expect that Congressman Boucher’s bill will include:

  • A requirement to prominently post a privacy policy (which is something that any reputable web-based business should already be doing)
  • A split in treatment between “data sharing necessary to enable first party ads” and targeting based upon information shared with third parties. Users can opt-out of first-party targeted ads, but must opt-in to having their information shared on behavioral ad networks.
  • A grant of enforcement authority to both the FTC and state attorneys general

Clearly a lot remains to be seen with this proposed legislation, but a few initial questions come to mind.  First, how will the "opt-in/opt-out" switch work?  What kinds of user authentication will be required for this? Will it be more than just a simple screen name and password?  Perhaps a social security number or other unique identifier so one cannot sign another up for behavioral tracking? But such a high level of user authentication may come with its own issues (e.g., security of SSNs).

Second, there may be issues with trying to define the difference between “data sharing necessary to enable first party ads” and "data sharing among behavioral networks."  Will a distinction be made for corporate siblings or other affiliated entities? Consider Amazon.com’s “Recommended for You” program. At first blush, this may seem to be “first party” ad targeting. However, a consumer can easily purchase items from sellers that are not Amazon.com, but who use Amazon.com for their web infrastructure. If Amazon.com were to store this purchase history in your profile, would this be “first party” or “third party” information under the proposed bill? Will Amazon.com be required to treat this information differently from information gleaned from its own sales? Does it at all matter if the consumer doesn’t know or doesn’t care about the difference?

Finally, with industry groups like ANA and IAB promulgating self-regulatory codes of conduct, will there be room for self regulation in Congressman Boucher’s legislative regime?

FTC Releases Revised Behavioral Advertising Guidelines - Staff Report May Trigger New Marketing Practices for Your Organization

On February 12, 2009, the Federal Trade Commission (FTC) staff issued a supplemental report of its December 2007 draft “Self-Regulatory Principles for Online Behavioral Advertising.” The report further develops the FTC’s voluntary best practices for the behavioral advertising industry and supports continued self-regulatory treatment. However, the document is not an endorsement of the status quo. The revised principles are likely to spur the following changes to your company’s treatment of behavioral advertisements, including: (1) the development of more consumer education content regarding behavioral advertising, (2) the development of internal privacy protections for anonymous data profiles, (3) the creation of opt-in customer notice mechanisms for use and collection of information perceived as sensitive (such as, information related to health, finance, or children), and (4) the creation of opt-in customer notice mechanisms for retroactive changes to your company’s privacy practices.

Further, you may think that existing website billboard privacy polices are sufficient for conformance with the FTC’s revised guidelines. This is unlikely. The staff report clearly indicates that static privacy policies may not be sufficient notice for behavioral advertising purposes, and disclaimers in proximity to the targeted advertisements may be needed. Notwithstanding the additional disclaimers outside the privacy policy, traditional billboard privacy policies may need revision to conform to the new guidelines, as well. Specifically, the staff report adopted a very broad and open-ended definition of PII1 for these purposes, and indicated that the sharing of information inside a corporate family could fall outside the “first party” sharing of data exemption.

While it is tempting to ignore a cumbersome (and voluntary) examination of information policy, the staff report also comes with a fair warning to take these guidelines seriously. The concurrences of Commissioners Jones Harbour and Liebowitz indicate that if companies do not engage in these voluntary regulatory efforts, mandatory behavioral advertising regulation could lie ahead. As stated by Commissioner Leibowitz, “[p]ut simply, this could be the last clear chance to show that self-regulation can—and will—effectively protect consumers’ privacy in a dynamic online marketplace.”

Click here to read the full white paper written by Amy S. Mushahwar and John P. Feldman.

Age Verification Technology Enables Targeted Advertising

As regulators push website operators to adopt age verification technology to protect children from inappropriate content and social contact with adults, a new opportunity has arisen for advertisers.

Nancy Willard, who calls herself an expert on Internet safety, says age verification companies are using information gained from seeking to verify children's ages to target them with advertising. She points to California-based eGuardian, which solicits personal information concerning children from parents-including kids' birthdates, as well as their addresses, schools and genders. The company then offers schools the entire $29 sign-up fee collected from parents for every parent the school steers to the site.

The company's business plan is to solicit websites that are willing to pay a commission for each eGuardian member, which would allow them use the data collected to tailor their advertising. eGuardian Chief Executive Ron Zayas notes that parents are provided with the choice to opt out of having data shared with advertisers, and says the privacy concerns are a "tradeoff."

"When children go to Web sites today, they are already exposed to ads," Zayas said. "We make sure the ads are appropriate for children. We do not increase the volume of ads shown, nor do we ‘sell them out' in any way to advertisers."

Read more about the controversy at nytimes.com